WatchGuard Fireware OS
Moderate fix1 remedy
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 12.0, <= 12.11.2
WatchGuard Fireware OS Authentication Portal HTTP Request Smuggling Vulnerability Allowing Reflected Self-Cross-Site Scripting
Vulnerability
Patched
A vulnerability allowing HTTP request smuggling has been identified in the Authentication portal of WatchGuard Fireware OS. This issue allows remote attackers to bypass request parameter sanitation and execute a reflected self-Cross-Site Scripting (XSS) attack. The vulnerability affects Fireware OS versions 12.0 through 12.11.2.
Impact
Exploitation of this vulnerability could lead to request parameter sanitation being bypassed, allowing for reflected self-Cross-Site Scripting (XSS) attacks.
Remediation
Users can upgrade to WatchGuard Fireware OS 12.11.3 to address this vulnerability.
Added: Sep 15, 2025, 10:59 PM
Updated: Sep 15, 2025, 10:59 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.3exploitability
6.0remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.