CVE-2022-26318
CRITICAL KEVWatchGuard XTM Firebox Unauthenticated Remote Command Execution
Title source: metasploitExploitation Summary
CVE-2022-26318 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022.
EIP tracks 5 public exploits from researchers including misterxid, h3llk4t3, BabyTeam1024, including a Metasploit module exploits/linux/http/watchguard_firebox_unauth_rce_cve_2022_26318.
AI-analyzed exploit summary This is a Python-based exploit for CVE-2022-26318, targeting WatchGuard XTM or FireWare OS. It leverages a buffer overflow in the agent.login method to achieve remote code execution (RCE) via a reverse shell.
Description
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
Exploits (5)
This is a Python-based exploit for CVE-2022-26318, targeting WatchGuard XTM or FireWare OS. It leverages a buffer overflow in the agent.login method to achieve remote code execution (RCE) via a reverse shell.
This is a functional exploit for CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM and FireWare OS. The PoC sends a maliciously crafted gzipped payload to trigger remote code execution via a reverse shell.
This exploit targets CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM/FireWare OS. It constructs a gzipped HTTP POST request with a malicious payload to achieve remote code execution via a reverse shell.
This PoC exploits CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM/FireWare OS, to achieve remote code execution via a crafted HTTP POST request with gzipped payload. The exploit sends a reverse shell to a specified listener.
This Metasploit module exploits a buffer overflow in WatchGuard Firebox and XTM appliances via the `/agent/login` endpoint, leading to unauthenticated remote code execution as the `nobody` user. It uses a crafted XML-RPC payload with ROP chains and shellcode to spawn a reverse Python shell.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H