CVE-2024-6594

HIGH

WatchGuard Single Sign-On Client <12.7 - DoS

Title source: llm

Description

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands. This issue affects Single Sign-On Client: through 12.7.

References (1)

[Vendor Advisory] https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00016

Scores

CVSS v3 7.5

EPSS 0.0061

EPSS Percentile 69.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-755

Status published

Affected Products (1)

watchguard/single_sign-on_client < 12.7

Timeline

Published Sep 25, 2024

Tracked Since Feb 18, 2026