CVE-2017-8055

WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox.

CVSS v3.0 NVD

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.59% chance of exploitation in the next 30 days, 75th percentile

Published

2017-04-22

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt

Security advisories

• http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGS…
• https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Firewa…
• https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilitie…

References

• CVE Record
• NVD entry