WatchGuard Single Sign-On Client vulnerabilities

2 CVEs affecting WatchGuard Single Sign-On Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6594, published 2024-09-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6592, published 2024-09-25. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on…
CVE-2024-6594, published 2024-09-25. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network…