CVE-2013-6021

WatchGuard Fireware < 11.8 - Remote Code Execution via Long Session ID Cookie

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-6021. PoCs published by st3n.

AI-analyzed exploit summary This exploit targets a remote buffer overflow in WatchGuard Firewall XTM version 11.7.4u1 via the sessionid cookie. It uses a heap spray technique and shellcode to bypass authentication and gain remote code execution.

Description

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

Exploits (1)

exploitdb WORKING POC

by st3n · perlremotehardware

https://www.exploit-db.com/exploits/29273

View Code ZIP pw:eip

This exploit targets a remote buffer overflow in WatchGuard Firewall XTM version 11.7.4u1 via the sessionid cookie. It uses a heap spray technique and shellcode to bypass authentication and gain remote code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: WatchGuard Firewall XTM <= 11.7.4u1

No auth needed

Prerequisites: Network access to the target's web console · SSL connectivity to the target

MITRE ATT&CK