CVE-2025-1545

8.2 highEPSS 0.5%

High (8.2) in watchguard fireware. EPSS 0.5% chance of exploitation in the next 30 days.

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-91
Published: 2025-12-04
Modified: 2026-09-25
Record from: the NVD, synced 2026-10-19

Affected

watchguard:fireware

References

https://psirt.watchguard.com/CVE-2025-1545
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025

Check your stack JSON