CVE-2022-31790

Name: CVE-2022-31790
Creator: NVD / NIST
Published: 2022-09-06T18:15:15.44+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 1.48%

Last modified Jun 17, 2026

CVE-2022-31790 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.. EPSS estimates a 1.48% chance of exploitation in the next 30 days.

Description

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

1.48%

70.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Watchguard	Fireware	>= 12.0.0, < 12.1.4	—
Watchguard	Fireware	>= 12.2.0, < 12.5.10	—
Watchguard	Fireware	12.6.1	U1
Watchguard	Fireware	12.6.3	—
Watchguard	Fireware	12.6.4	—
Watchguard	Fireware	12.7.0	U1
Watchguard	Fireware	12.7.1	—
Watchguard	Fireware	12.7.2	U2
Watchguard	Fireware	12.8.0	U1

References

https://www.ambionics.io/blog/hacking-watchguard-firewallsExploit, Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/30/2Mailing List, Third Party Advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00017Vendor Advisory
https://www.ambionics.io/blog/hacking-watchguard-firewallsExploit, Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/30/2Mailing List, Third Party Advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00017Vendor Advisory

Timeline

Published: Sep 6, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-31790?

How severe is CVE-2022-31790?

CVE-2022-31790 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.48% probability of exploitation in the next 30 days.

How do I fix CVE-2022-31790?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-31790?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST