HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or reboot…

CVSS

10.0

Critical

EPSS

0.02

p77

Published

2000-01-01

Updated

2000-01-01

Description

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.

Affected products

Soho_firewall

CVSS vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Timeline

2000-01-01

Published

2000-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: N

Network (N)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: C

Complete

Integrity Impact

I: C

Complete

Availability Impact

A: C

Complete

Exploit indicators

EPSS

0.019 · p77

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Watchguard

Soho Firewall

Product	Vendor	Status
soho_firewall	*	Tracked

Source databases

CVE