Vulnerability Description
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Watchguard | Fireware | <= 11.2.1 |
Related Weaknesses (CWE)
References
- http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A00Vendor Advisory
- https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txtExploitThird Party AdvisoryVDB Entry
- https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-VulneExploitThird Party Advisory
- https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotRelease NotesVendor Advisory
- http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A00Vendor Advisory
- https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txtExploitThird Party AdvisoryVDB Entry
- https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-VulneExploitThird Party Advisory
- https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotRelease NotesVendor Advisory
FAQ
What is CVE-2017-8056?
CVE-2017-8056 is a vulnerability with a CVSS score of 5.3 (MEDIUM). WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends ...
How severe is CVE-2017-8056?
CVE-2017-8056 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8056?
Check the references section above for vendor advisories and patch information. Affected products include: Watchguard Fireware.