WatchGuard Firebox Stored Cross-Site Scripting Vulnerability in IPS Configuration

A stored cross-site scripting vulnerability has been identified in WatchGuard Fireware OS, specifically in the management interface of Firebox appliances. This issue affects Fireware OS versions 12.0 through 12.11.2, excluding 12.5.13. The vulnerability arises from improper input neutralization during web page generation, allowing an authenticated administrator to inject and execute arbitrary JavaScript in the management interface of other users.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user accessing the Firebox management interface.

Remediation

Users can upgrade to Fireware OS 12.11.3 or, for T15 and T35 models, to Fireware OS 12.5.13.