WatchGuard Firebox vulnerabilities

4 CVEs affecting WatchGuard Firebox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1520, published 2003-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1519, published 2003-04-02. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute…
CVE-2002-1520, published 2003-04-02. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows…
CVE-2000-0783, published 2000-10-20. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.
CVE-2002-1046, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to…