CVE-2025-0178
Medium
Description
An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.
SeverityMedium
CVSS6.1
Exploit probability—
ProductWatchguard Fireware
PublishedFeb 14, 2025
First seenFeb 14, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- watchguard fireware12.11.1, 12.5.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| watchguard fireware | 12.0.0 ≤ v < 12.11.1, 12.5 ≤ v < 12.5.13 | 12.11.1, 12.5.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.