synced 4 MIN AGO
01 Record

CVE-2022-25361

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before

UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector

02 Description

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
1.32% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 70.7% of scored records. A rank, not a probability.
NVD base score
9.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2022-06-07 13:26Z4 YR AGO
Last updated
2024-08-03 04:36Z2 YR AGO
Reserved
2022-02-18
Assigning CNA
mitre
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
No CWE assigned
Data version
5.1
Document digest
d8ed94b0232ad7542316ef29ef9f0fca906b8c7dab916d0594a20357524c54b6

05 Affected products

VendorProductVersionsPlatforms
watchguardfirebox_m200Not specified—
watchguardfirebox_m270Not specified—
watchguardfirebox_m290Not specified—
watchguardfirebox_m300Not specified—
watchguardfirebox_m370Not specified—
watchguardfirebox_m390Not specified—
watchguardfirebox_m400Not specified—
watchguardfirebox_m440Not specified—
watchguardfirebox_m470Not specified—
watchguardfirebox_m4800Not specified—
watchguardfirebox_m500Not specified—
watchguardfirebox_m570Not specified—
watchguardfirebox_m5800Not specified—
watchguardfirebox_m590Not specified—
watchguardfirebox_m670Not specified—
watchguardfirebox_m690Not specified—
watchguardfirebox_t10Not specified—
watchguardfirebox_t10-dNot specified—
watchguardfirebox_t10-wNot specified—
watchguardfirebox_t15Not specified—
watchguardfirebox_t15-wNot specified—
watchguardfirebox_t20Not specified—
watchguardfirebox_t20-wNot specified—
watchguardfirebox_t30Not specified—
watchguardfirebox_t30-wNot specified—
watchguardfirebox_t35Not specified—
watchguardfirebox_t35-rNot specified—
watchguardfirebox_t35-wNot specified—
watchguardfirebox_t40Not specified—
watchguardfirebox_t40-wNot specified—
watchguardfirebox_t50Not specified—
watchguardfirebox_t50-wNot specified—
watchguardfirebox_t55Not specified—
watchguardfirebox_t55-wNot specified—
watchguardfirebox_t70Not specified—
watchguardfirebox_t80Not specified—
watchguardfirebox_xtm1520-rpNot specified—
watchguardfirebox_xtm1525-rpNot specified—
watchguardfirebox_xtm2520Not specified—
watchguardfirebox_xtm850Not specified—
watchguardfirebox_xtm860Not specified—
watchguardfirebox_xtm870Not specified—
watchguardfirebox_xtm870-fNot specified—
watchguardfireboxcloudNot specified—
watchguardfireboxvNot specified—
watchguardfirewareNot specified—
watchguardxtmvNot specified—

06 References