Description
Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands. This issue affects Single Sign-On Client: through 12.7.
References (1)
Core 1
Core References
Vendor Advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00016
Scores
CVSS v3
7.5
EPSS
0.0048
EPSS Percentile
37.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-755
Status
published
Products (1)
watchguard/single_sign-on_client
< 12.7
Published
Sep 25, 2024
Tracked Since
Feb 18, 2026