CVE-2022-31749

Published Jan 27, 2025·Updated Jun 16, 2026

NVD Description

An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM appliances

Public Exploits & PoCs2 found

PoC: cve-2022-31749

Simple PoC-checker for CVE-2022-31749 by 1vere$k

PoC: hook

Proof of Concept for WatchGuard Authenticated Arbitrary File Read (CVE-2022-31749)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free