{ "name": "Exploited firewall and VPN gateway vulnerabilities", "description": "Firewall, SSL-VPN and remote-access entries of the CISA KEV catalog, with NVD publication date and CVSS.", "license": "https://creativecommons.org/licenses/by/4.0/", "rights": "Catalog rows are copied from CISA's KEV catalog, which is public domain (CC0); NVD data is public domain too. The selection and arrangement are MyIPScan's (CC BY 4.0).", "attribution": "MyIPScan (https://myipscan.net/firewalls/); quoted evidence belongs to its source", "page": "https://myipscan.net/firewalls/", "url": "https://myipscan.net/firewalls/kev.json", "dateModified": "2026-10-20", "records": 138, "data": { "catalogVersion": "2026.10.20", "source": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json", "nvd": "https://nvd.nist.gov/developers/vulnerabilities", "entries": [ { "cveID": "CVE-2024-24919", "vendorProject": "Check Point", "product": "Quantum Security Gateways", "vulnerabilityName": "Check Point Quantum Security Gateways Information Disclosure Vulnerability", "dateAdded": "2024-05-30", "shortDescription": "Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-06-20", "knownRansomwareCampaignUse": "Known", "notes": "https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919", "vendor": "check-point", "nvd": { "cvss": 8.6, "cwe": "CWE-200", "published": "2024-05-28", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-50751", "vendorProject": "Check Point", "product": "Security Gateway", "vulnerabilityName": "Check Point Security Gateway Improper Authentication Vulnerability", "dateAdded": "2026-06-08", "shortDescription": "Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2026-06-11", "knownRansomwareCampaignUse": "Known", "notes": "https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ ; https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM. ; https://nvd.nist.gov/vuln/detail/CVE-2026-50751", "vendor": "check-point", "nvd": { "cvss": 9.3, "cwe": "CWE-287", "published": "2026-06-08", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-85102", "vendorProject": "Check Point", "product": "Multiple Products", "vulnerabilityName": "Check Point Multiple Products Improper Certificate Validation Vulnerability", "dateAdded": "2026-09-22", "shortDescription": "Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-25", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102", "vendor": "check-point", "nvd": { "cvss": 9.8, "cwe": "CWE-295", "published": "2026-09-09", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2018-0296", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA)", "vulnerabilityName": "Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2018-0296", "vendor": "cisco", "nvd": { "cvss": 7.5, "cwe": "CWE-20", "published": "2018-06-07", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-3452", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-3452", "vendor": "cisco", "nvd": { "cvss": 7.5, "cwe": "CWE-20", "published": "2020-07-22", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-3580", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-3580", "vendor": "cisco", "nvd": { "cvss": 6.1, "cwe": "CWE-79", "published": "2020-10-21", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2016-6366", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA)", "vulnerabilityName": "Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability", "dateAdded": "2022-05-24", "shortDescription": "A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-06-14", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2016-6366", "vendor": "cisco", "nvd": { "cvss": 8.8, "cwe": "CWE-120", "published": "2016-08-18", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2016-6367", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA)", "vulnerabilityName": "Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability", "dateAdded": "2022-05-24", "shortDescription": "A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-06-14", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2016-6367", "vendor": "cisco", "nvd": { "cvss": 7.8, "cwe": "CWE-77", "published": "2016-08-18", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-20269", "vendorProject": "Cisco", "product": "Adaptive Security Appliance and Firepower Threat Defense", "vulnerabilityName": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "dateAdded": "2023-09-13", "shortDescription": "Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.", "requiredAction": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "dueDate": "2023-10-04", "knownRansomwareCampaignUse": "Known", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC; https://nvd.nist.gov/vuln/detail/CVE-2023-20269", "vendor": "cisco", "nvd": { "cvss": 9.1, "cwe": "CWE-288", "published": "2023-09-06", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-3259", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Information Disclosure Vulnerability", "dateAdded": "2024-02-15", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-03-07", "knownRansomwareCampaignUse": "Known", "notes": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB; https://nvd.nist.gov/vuln/detail/CVE-2020-3259", "vendor": "cisco", "nvd": { "cvss": 7.5, "cwe": "CWE-200", "published": "2020-05-06", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-20353", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Denial of Service Vulnerability", "dateAdded": "2024-04-24", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-05-01", "knownRansomwareCampaignUse": "Unknown", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2; https://nvd.nist.gov/vuln/detail/CVE-2024-20353", "vendor": "cisco", "nvd": { "cvss": 8.6, "cwe": "CWE-835", "published": "2024-04-24", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-20359", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Privilege Escalation Vulnerability", "dateAdded": "2024-04-24", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-05-01", "knownRansomwareCampaignUse": "Unknown", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h; https://nvd.nist.gov/vuln/detail/CVE-2024-20359", "vendor": "cisco", "nvd": { "cvss": 6.0, "cwe": "CWE-94", "published": "2024-04-24", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-20481", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "vulnerabilityName": "Cisco ASA and FTD Denial-of-Service Vulnerability", "dateAdded": "2024-10-24", "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-11-14", "knownRansomwareCampaignUse": "Unknown", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW ; https://nvd.nist.gov/vuln/detail/CVE-2024-20481", "vendor": "cisco", "nvd": { "cvss": 5.8, "cwe": "CWE-772", "published": "2024-10-23", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2014-2120", "vendorProject": "Cisco", "product": "Adaptive Security Appliance (ASA)", "vulnerabilityName": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability", "dateAdded": "2024-11-12", "shortDescription": "Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-12-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120", "vendor": "cisco", "nvd": { "cvss": 6.1, "cwe": "CWE-79", "published": "2014-03-19", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-20333", "vendorProject": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "vulnerabilityName": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "dateAdded": "2025-09-25", "shortDescription": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.", "requiredAction": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "dueDate": "2025-09-26", "knownRansomwareCampaignUse": "Unknown", "notes": "CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333", "vendor": "cisco", "nvd": { "cvss": 9.9, "cwe": "CWE-120", "published": "2025-09-25", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-20362", "vendorProject": "Cisco", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "vulnerabilityName": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "dateAdded": "2025-09-25", "shortDescription": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.", "requiredAction": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "dueDate": "2025-09-26", "knownRansomwareCampaignUse": "Unknown", "notes": "CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW ; https://nvd.nist.gov/vuln/detail/CVE-2025-20362", "vendor": "cisco", "nvd": { "cvss": 8.6, "cwe": "CWE-862", "published": "2025-09-25", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-20349", "vendorProject": "Cisco", "product": "Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ", "vulnerabilityName": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability", "dateAdded": "2026-08-11", "shortDescription": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-08-14", "knownRansomwareCampaignUse": "Unknown", "notes": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349", "vendor": "cisco", "nvd": { "cvss": 8.6, "cwe": "CWE-244", "published": "2026-08-11", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-19781", "vendorProject": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-19781", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-22", "published": "2019-12-27", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8193", "vendorProject": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-8193", "vendor": "citrix", "nvd": { "cvss": 6.5, "cwe": "CWE-284", "published": "2020-07-10", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8195", "vendorProject": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-8195", "vendor": "citrix", "nvd": { "cvss": 6.5, "cwe": "CWE-20", "published": "2020-07-10", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8196", "vendorProject": "Citrix", "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-8196", "vendor": "citrix", "nvd": { "cvss": 4.3, "cwe": "CWE-284", "published": "2020-07-10", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-12989", "vendorProject": "Citrix", "product": "SD-WAN and NetScaler", "vulnerabilityName": "Citrix SD-WAN and NetScaler SQL Injection Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-12989", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2019-07-16", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-12991", "vendorProject": "Citrix", "product": "SD-WAN and NetScaler", "vulnerabilityName": "Citrix SD-WAN and NetScaler Command Injection Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-12991", "vendor": "citrix", "nvd": { "cvss": 8.8, "cwe": "CWE-78", "published": "2019-07-16", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-27518", "vendorProject": "Citrix", "product": "Application Delivery Controller (ADC) and Gateway", "vulnerabilityName": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability", "dateAdded": "2022-12-13", "shortDescription": "Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-01-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/; https://nvd.nist.gov/vuln/detail/CVE-2022-27518", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-664", "published": "2022-12-13", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-3519", "vendorProject": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerabilityName": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "dateAdded": "2023-07-19", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-08-09", "knownRansomwareCampaignUse": "Known", "notes": "https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467; https://nvd.nist.gov/vuln/detail/CVE-2023-3519", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-94", "published": "2023-07-19", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-4966", "vendorProject": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerabilityName": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "dateAdded": "2023-10-18", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.", "requiredAction": "Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-08", "knownRansomwareCampaignUse": "Known", "notes": "https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/, https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967 ; https://nvd.nist.gov/vuln/detail/CVE-2023-4966", "vendor": "citrix", "nvd": { "cvss": 7.5, "cwe": "CWE-119", "published": "2023-10-10", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-6548", "vendorProject": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerabilityName": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "dateAdded": "2024-01-17", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-01-24", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6548", "vendor": "citrix", "nvd": { "cvss": 8.8, "cwe": "CWE-94", "published": "2024-01-17", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-6549", "vendorProject": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerabilityName": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "dateAdded": "2024-01-17", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-02-07", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6549", "vendor": "citrix", "nvd": { "cvss": 7.5, "cwe": "CWE-119", "published": "2024-01-17", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-6543", "vendorProject": "Citrix", "product": "NetScaler ADC and Gateway", "vulnerabilityName": "Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability", "dateAdded": "2025-06-30", "shortDescription": "Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-07-21", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788 ; https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-6543", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-119", "published": "2025-06-25", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-5777", "vendorProject": "Citrix", "product": "NetScaler ADC and Gateway", "vulnerabilityName": "Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability", "dateAdded": "2025-07-10", "shortDescription": "Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-07-11", "knownRansomwareCampaignUse": "Known", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5777", "vendor": "citrix", "nvd": { "cvss": 7.5, "cwe": "CWE-125", "published": "2025-06-17", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-7775", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Memory Overflow Vulnerability", "dateAdded": "2025-08-26", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-08-28", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938 ; https://nvd.nist.gov/vuln/detail/CVE-2025-7775", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-119", "published": "2025-08-26", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-3055", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Out-of-Bounds Read Vulnerability", "dateAdded": "2026-03-30", "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2026-04-02", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368 ; https://nvd.nist.gov/vuln/detail/CVE-2026-3055", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-125", "published": "2026-03-23", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-8452", "vendorProject": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "vulnerabilityName": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "dateAdded": "2026-08-26", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. ", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-08-29", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8452", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-119", "published": "2026-06-30", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-19490", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability", "dateAdded": "2026-09-09", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-12", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-288", "published": "2026-08-19", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-88771", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Improper Input Validation Vulnerability", "dateAdded": "2026-09-27", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-30", "knownRansomwareCampaignUse": "Unknown", "notes": "Running the provided IOCs in the NetScaler console may help identify indicators of exploitation. Customers must conduct forensic triage as directed by BOD 26‑04 and follow Citrix’s published guidance for mitigations. For more information, please see: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778 ; https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 ; https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88772", "vendor": "citrix", "nvd": { "cvss": 9.8, "cwe": "CWE-20", "published": "2026-09-27", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-88772", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "dateAdded": "2026-09-27", "shortDescription": "Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-30", "knownRansomwareCampaignUse": "Unknown", "notes": "Running the provided IOCs in the NetScaler console may help identify indicators of exploitation. Customers must conduct forensic triage as directed by BOD 26‑04 and follow Citrix’s published guidance for mitigations. For more information, please see: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778 ; https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 ; https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88772", "vendor": "citrix", "nvd": { "cvss": 8.1, "cwe": "CWE-119", "published": "2026-09-27", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-88779", "vendorProject": "Citrix", "product": "NetScaler", "vulnerabilityName": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "dateAdded": "2026-10-04", "shortDescription": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-10-07", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779", "vendor": "citrix", "nvd": { "cvss": 7.5, "cwe": "CWE-119", "published": "2026-10-04", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-5902", "vendorProject": "F5", "product": "BIG-IP", "vulnerabilityName": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-22", "published": "2020-07-01", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22986", "vendorProject": "F5", "product": "BIG-IP and BIG-IQ Centralized Management", "vulnerabilityName": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2021-11-17", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-22986", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-918", "published": "2021-03-31", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22991", "vendorProject": "F5", "product": "BIG-IP Traffic Management Microkernel", "vulnerabilityName": "F5 BIG-IP Traffic Management Microkernel Buffer Overflow", "dateAdded": "2022-01-18", "shortDescription": "The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-02-01", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-22991", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-119", "published": "2021-03-31", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-1388", "vendorProject": "F5", "product": "BIG-IP", "vulnerabilityName": "F5 BIG-IP Missing Authentication Vulnerability", "dateAdded": "2022-05-10", "shortDescription": "F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-31", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2022-1388", "vendor": "f5", "nvd": { "published": "2022-05-05", "cvss": 9.8, "severity": "CRITICAL", "cwe": "CWE-306" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-46747", "vendorProject": "F5", "product": "BIG-IP Configuration Utility", "vulnerabilityName": "F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability", "dateAdded": "2023-10-31", "shortDescription": "F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-21", "knownRansomwareCampaignUse": "Known", "notes": "https://my.f5.com/manage/s/article/K000137353; https://nvd.nist.gov/vuln/detail/CVE-2023-46747", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-288", "published": "2023-10-26", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-46748", "vendorProject": "F5", "product": "BIG-IP Configuration Utility", "vulnerabilityName": "F5 BIG-IP Configuration Utility SQL Injection Vulnerability", "dateAdded": "2023-10-31", "shortDescription": "F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-21", "knownRansomwareCampaignUse": "Unknown", "notes": "https://my.f5.com/manage/s/article/K000137365 ; https://nvd.nist.gov/vuln/detail/CVE-2023-46748", "vendor": "f5", "nvd": { "cvss": 8.8, "cwe": "CWE-89", "published": "2023-10-26", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-53521", "vendorProject": "F5", "product": "BIG-IP", "vulnerabilityName": "F5 BIG-IP Stack-Based Buffer Overflow Vulnerability", "dateAdded": "2026-03-27", "shortDescription": "F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2026-03-30", "knownRansomwareCampaignUse": "Unknown", "notes": "Please adhere to F5’s guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible F5 products affected by this vulnerability. For more information please see: https://my.f5.com/manage/s/article/K000156741 ; https://my.f5.com/manage/s/article/K000160486 ; https://my.f5.com/manage/s/article/K11438344 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53521", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-121", "published": "2025-10-15", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-94127", "vendorProject": "F5", "product": "BIG-IP APM", "vulnerabilityName": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability", "dateAdded": "2026-09-22", "shortDescription": "F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-25", "knownRansomwareCampaignUse": "Unknown", "notes": "For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127", "vendor": "f5", "nvd": { "cvss": 9.8, "cwe": "CWE-122", "published": "2026-09-22", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2018-13379", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2018-13379", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-22", "published": "2019-06-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-5591", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Default Configuration Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-5591", "vendor": "fortinet", "nvd": { "cvss": 6.5, "cwe": "CWE-306", "published": "2020-08-14", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-12812", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-12812", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-178", "published": "2020-07-24", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-44168", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Arbitrary File Download", "dateAdded": "2021-12-10", "shortDescription": "Fortinet FortiOS \"execute restore src-vis\" downloads code without integrity checking, allowing an attacker to arbitrarily download files.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2021-12-24", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-44168", "vendor": "fortinet", "nvd": { "cvss": 7.8, "cwe": "CWE-494", "published": "2022-01-04", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2018-13382", "vendorProject": "Fortinet", "product": "FortiOS and FortiProxy", "vulnerabilityName": "Fortinet FortiOS and FortiProxy Improper Authorization", "dateAdded": "2022-01-10", "shortDescription": "An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-07-10", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2018-13382", "vendor": "fortinet", "nvd": { "cvss": 7.5, "cwe": "CWE-863", "published": "2019-06-04", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2018-13383", "vendorProject": "Fortinet", "product": "FortiOS and FortiProxy", "vulnerabilityName": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "dateAdded": "2022-01-10", "shortDescription": "A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-07-10", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2018-13383", "vendor": "fortinet", "nvd": { "cvss": 6.5, "cwe": "CWE-787", "published": "2019-05-29", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2018-13374", "vendorProject": "Fortinet", "product": "FortiOS and FortiADC", "vulnerabilityName": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "dateAdded": "2022-09-08", "shortDescription": "Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-09-29", "knownRansomwareCampaignUse": "Known", "notes": "https://www.fortiguard.com/psirt/FG-IR-18-157; https://nvd.nist.gov/vuln/detail/CVE-2018-13374", "vendor": "fortinet", "nvd": { "cvss": 4.3, "cwe": "CWE-732", "published": "2019-01-22", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-40684", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Authentication Bypass Vulnerability", "dateAdded": "2022-10-11", "shortDescription": "Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-11-01", "knownRansomwareCampaignUse": "Known", "notes": "https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-287", "published": "2022-10-18", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-42475", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability", "dateAdded": "2022-12-13", "shortDescription": "Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-01-03", "knownRansomwareCampaignUse": "Known", "notes": "https://www.fortiguard.com/psirt/FG-IR-22-398; https://nvd.nist.gov/vuln/detail/CVE-2022-42475", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-197", "published": "2023-01-02", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-41328", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Path Traversal Vulnerability", "dateAdded": "2023-03-14", "shortDescription": "Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-04-04", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.fortiguard.com/psirt/FG-IR-22-369; https://nvd.nist.gov/vuln/detail/CVE-2022-41328", "vendor": "fortinet", "nvd": { "cvss": 7.1, "cwe": "CWE-22", "published": "2023-03-07", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-27997", "vendorProject": "Fortinet", "product": "FortiOS and FortiProxy SSL-VPN", "vulnerabilityName": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "dateAdded": "2023-06-13", "shortDescription": "Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-07-04", "knownRansomwareCampaignUse": "Known", "notes": "https://www.fortiguard.com/psirt/FG-IR-23-097; https://nvd.nist.gov/vuln/detail/CVE-2023-27997", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-122", "published": "2023-06-13", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-21762", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "dateAdded": "2024-02-09", "shortDescription": "Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-02-16", "knownRansomwareCampaignUse": "Known", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21762", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-787", "published": "2024-02-09", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-23113", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Format String Vulnerability", "dateAdded": "2024-10-09", "shortDescription": "Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-10-30", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-134", "published": "2024-02-15", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-55591", "vendorProject": "Fortinet", "product": "FortiOS and FortiProxy", "vulnerabilityName": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "dateAdded": "2025-01-14", "shortDescription": "Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-01-21", "knownRansomwareCampaignUse": "Known", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55591", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-288", "published": "2025-01-14", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-24472", "vendorProject": "Fortinet", "product": "FortiOS and FortiProxy", "vulnerabilityName": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "dateAdded": "2025-03-18", "shortDescription": " Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-04-08", "knownRansomwareCampaignUse": "Known", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24472", "vendor": "fortinet", "nvd": { "cvss": 8.1, "cwe": "CWE-288", "published": "2025-02-11", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-6693", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability", "dateAdded": "2025-06-25", "shortDescription": "Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. ", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-07-16", "knownRansomwareCampaignUse": "Known", "notes": "https://fortiguard.com/advisory/FG-IR-19-007 ; https://nvd.nist.gov/vuln/detail/CVE-2019-6693", "vendor": "fortinet", "nvd": { "cvss": 6.5, "cwe": "CWE-798", "published": "2019-11-21", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-25257", "vendorProject": "Fortinet", "product": "FortiWeb", "vulnerabilityName": "Fortinet FortiWeb SQL Injection Vulnerability", "dateAdded": "2025-07-18", "shortDescription": "Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-08-08", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-25-151 ; https://nvd.nist.gov/vuln/detail/CVE-2025-25257", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2025-07-17", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-64446", "vendorProject": "Fortinet", "product": "FortiWeb", "vulnerabilityName": "Fortinet FortiWeb Path Traversal Vulnerability", "dateAdded": "2025-11-14", "shortDescription": "Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-11-21", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.fortiguard.com/psirt/FG-IR-25-910 ; https://nvd.nist.gov/vuln/detail/CVE-2025-64446", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-23", "published": "2025-11-14", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-58034", "vendorProject": "Fortinet", "product": "FortiWeb", "vulnerabilityName": "Fortinet FortiWeb OS Command Injection Vulnerability", "dateAdded": "2025-11-18", "shortDescription": "Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-11-25", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-25-513 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58034", "vendor": "fortinet", "nvd": { "cvss": 7.2, "cwe": "CWE-78", "published": "2025-11-18", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-59718", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "dateAdded": "2025-12-16", "shortDescription": "Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-12-23", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-25-647 ; https://docs.fortinet.com/upgrade-tool/fortigate ; https://nvd.nist.gov/vuln/detail/CVE-2025-59718", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-347", "published": "2025-12-09", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-24858", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "dateAdded": "2026-01-27", "shortDescription": "Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2026-01-30", "knownRansomwareCampaignUse": "Unknown", "notes": "Please adhere to Fortinet's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Fortinet products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://fortiguard.fortinet.com/psirt/FG-IR-26-060 ; https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios ; https://nvd.nist.gov/vuln/detail/CVE-2026-24858", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-288", "published": "2026-01-27", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-68686", "vendorProject": "Fortinet", "product": "FortiOS", "vulnerabilityName": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "dateAdded": "2026-07-27", "shortDescription": "Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-08-10", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686", "vendor": "fortinet", "nvd": { "cvss": 5.9, "cwe": "CWE-200", "published": "2026-02-10", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-25249", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability", "dateAdded": "2026-09-09", "shortDescription": "Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-12", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249", "vendor": "fortinet", "nvd": { "cvss": 9.8, "cwe": "CWE-122", "published": "2026-01-13", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-61624", "vendorProject": "Fortinet", "product": "Multiple Products", "vulnerabilityName": "Fortinet Multiple Products Path Traversal Vulnerability", "dateAdded": "2026-10-16", "shortDescription": "FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-10-19", "knownRansomwareCampaignUse": "Unknown", "notes": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-61624", "vendor": "fortinet", "nvd": { "cvss": 6.5, "cwe": "CWE-22", "published": "2026-04-14", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-11510", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2019-11510", "vendor": "ivanti", "nvd": { "cvss": 10.0, "cwe": "CWE-22", "published": "2019-05-08", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-11539", "vendorProject": "Ivanti", "product": "Pulse Connect Secure and Pulse Policy Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-11539", "vendor": "ivanti", "nvd": { "cvss": 7.2, "cwe": "CWE-78", "published": "2019-04-26", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8243", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2020-8243", "vendor": "ivanti", "nvd": { "cvss": 7.2, "cwe": "CWE-94", "published": "2020-09-30", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8260", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2020-8260", "vendor": "ivanti", "nvd": { "cvss": 7.2, "cwe": "CWE-434", "published": "2020-10-28", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22893", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22893", "vendor": "ivanti", "nvd": { "cvss": 10.0, "cwe": "CWE-287", "published": "2021-04-23", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22894", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22894", "vendor": "ivanti", "nvd": { "cvss": 8.8, "cwe": "CWE-94", "published": "2021-05-27", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22899", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Command Injection Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22899", "vendor": "ivanti", "nvd": { "cvss": 8.8, "cwe": "CWE-77", "published": "2021-05-27", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-22900", "vendorProject": "Ivanti", "product": "Pulse Connect Secure", "vulnerabilityName": "Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22900", "vendor": "ivanti", "nvd": { "cvss": 7.2, "cwe": "CWE-94", "published": "2021-05-27", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-8218", "vendorProject": "Pulse Secure", "product": "Pulse Connect Secure", "vulnerabilityName": "Pulse Connect Secure Code Injection Vulnerability", "dateAdded": "2022-03-07", "shortDescription": "A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-09-07", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-8218", "vendor": "ivanti", "nvd": { "cvss": 7.2, "cwe": "CWE-94", "published": "2020-07-30", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-46805", "vendorProject": "Ivanti", "product": "Connect Secure and Policy Secure", "vulnerabilityName": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "dateAdded": "2024-01-10", "shortDescription": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-01-22", "knownRansomwareCampaignUse": "Known", "notes": "Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-46805", "vendor": "ivanti", "nvd": { "cvss": 8.2, "cwe": "CWE-287", "published": "2024-01-12", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-21887", "vendorProject": "Ivanti", "product": "Connect Secure and Policy Secure", "vulnerabilityName": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "dateAdded": "2024-01-10", "shortDescription": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-01-22", "knownRansomwareCampaignUse": "Known", "notes": "Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-21887", "vendor": "ivanti", "nvd": { "cvss": 9.1, "cwe": "CWE-77", "published": "2024-01-12", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-21893", "vendorProject": "Ivanti", "product": "Connect Secure, Policy Secure, and Neurons", "vulnerabilityName": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "dateAdded": "2024-01-31", "shortDescription": "Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-02-02", "knownRansomwareCampaignUse": "Known", "notes": "https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-21893", "vendor": "ivanti", "nvd": { "cvss": 8.2, "cwe": "CWE-918", "published": "2024-01-31", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-0282", "vendorProject": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "vulnerabilityName": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "dateAdded": "2025-01-08", "shortDescription": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.", "requiredAction": "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.", "dueDate": "2025-01-15", "knownRansomwareCampaignUse": "Known", "notes": "CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282 Additional References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0282", "vendor": "ivanti", "nvd": { "cvss": 9.0, "cwe": "CWE-121", "published": "2025-01-08", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-22457", "vendorProject": "Ivanti", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "vulnerabilityName": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "dateAdded": "2025-04-04", "shortDescription": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution. ", "requiredAction": "Apply mitigations as set forth in the CISA instructions linked below.", "dueDate": "2025-04-11", "knownRansomwareCampaignUse": "Known", "notes": "CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-22457 ; Additional References: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22457", "vendor": "ivanti", "nvd": { "cvss": 9.8, "cwe": "CWE-121", "published": "2025-04-03", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-104935", "vendorProject": "Ivanti", "product": "Connect Secure", "vulnerabilityName": "Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability", "dateAdded": "2026-10-13", "shortDescription": "Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-10-16", "knownRansomwareCampaignUse": "Unknown", "notes": "https:/forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 ; https://nvd.nist.gov/vuln/detail/CVE-2026-104935", "vendor": "ivanti", "nvd": { "cvss": 8.6, "cwe": "CWE-290", "published": "2026-10-13", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-1631", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS Path Traversal Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-1631", "vendor": "juniper", "nvd": { "cvss": 9.8, "cwe": "CWE-22", "published": "2020-05-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-36844", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS EX Series PHP External Variable Modification Vulnerability", "dateAdded": "2023-11-13", "shortDescription": "Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-36844", "vendor": "juniper", "nvd": { "cvss": 5.3, "cwe": "CWE-473", "published": "2023-08-17", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-36845", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability", "dateAdded": "2023-11-13", "shortDescription": "Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-36845", "vendor": "juniper", "nvd": { "cvss": 9.8, "cwe": "CWE-473", "published": "2023-08-17", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-36846", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "dateAdded": "2023-11-13", "shortDescription": "Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-36846", "vendor": "juniper", "nvd": { "cvss": 5.3, "cwe": "CWE-306", "published": "2023-08-17", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-36847", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability", "dateAdded": "2023-11-13", "shortDescription": "Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2023-36847", "vendor": "juniper", "nvd": { "cvss": 5.3, "cwe": "CWE-306", "published": "2023-08-17", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-36851", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "dateAdded": "2023-11-13", "shortDescription": "Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-11-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-36851", "vendor": "juniper", "nvd": { "cvss": 5.3, "cwe": "CWE-306", "published": "2023-09-27", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-21590", "vendorProject": "Juniper", "product": "Junos OS", "vulnerabilityName": "Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability", "dateAdded": "2025-03-13", "shortDescription": "Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-04-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-21590", "vendor": "juniper", "nvd": { "cvss": 4.4, "cwe": "CWE-653", "published": "2025-03-12", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2015-7755", "vendorProject": "Juniper", "product": "ScreenOS", "vulnerabilityName": "Juniper ScreenOS Improper Authentication Vulnerability", "dateAdded": "2025-10-02", "shortDescription": "Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-10-23", "knownRansomwareCampaignUse": "Unknown", "notes": "https://supportportal.juniper.net/s/article/2015-12-Out-of-Cycle-Security-Bulletin-ScreenOS-Multiple-Security-issues-with-ScreenOS-CVE-2015-7755-CVE-2015-7756 ; https://nvd.nist.gov/vuln/detail/CVE-2015-7755", "vendor": "juniper", "nvd": { "cvss": 9.8, "cwe": "CWE-287", "published": "2015-12-19", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-1579", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "dateAdded": "2022-01-10", "shortDescription": "Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-07-10", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-1579", "vendor": "palo-alto-networks", "nvd": { "cvss": 8.1, "cwe": "CWE-134", "published": "2019-07-19", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-2021", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-2021", "vendor": "palo-alto-networks", "nvd": { "cvss": 10.0, "cwe": "CWE-347", "published": "2020-06-29", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2017-15944", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "dateAdded": "2022-08-18", "shortDescription": "Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-09-08", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2017-15944; https://nvd.nist.gov/vuln/detail/CVE-2017-15944", "vendor": "palo-alto-networks", "nvd": { "cvss": 9.8, "cwe": "CWE-20", "published": "2017-12-11", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-0028", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability", "dateAdded": "2022-08-22", "shortDescription": "A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-09-12", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2022-0028; https://nvd.nist.gov/vuln/detail/CVE-2022-0028", "vendor": "palo-alto-networks", "nvd": { "cvss": 8.6, "cwe": "CWE-406", "published": "2022-08-10", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-3400", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "dateAdded": "2024-04-12", "shortDescription": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "requiredAction": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "dueDate": "2024-04-19", "knownRansomwareCampaignUse": "Known", "notes": "https://security.paloaltonetworks.com/CVE-2024-3400 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "vendor": "palo-alto-networks", "nvd": { "cvss": 10.0, "cwe": "CWE-20", "published": "2024-04-12", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-0012", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability", "dateAdded": "2024-11-18", "shortDescription": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.", "dueDate": "2024-12-09", "knownRansomwareCampaignUse": "Known", "notes": "https://security.paloaltonetworks.com/CVE-2024-0012 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0012", "vendor": "palo-alto-networks", "nvd": { "cvss": 9.8, "cwe": "CWE-306", "published": "2024-11-18", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-9474", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability", "dateAdded": "2024-11-18", "shortDescription": "Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.", "dueDate": "2024-12-09", "knownRansomwareCampaignUse": "Known", "notes": "https://security.paloaltonetworks.com/CVE-2024-9474 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9474", "vendor": "palo-alto-networks", "nvd": { "cvss": 7.2, "cwe": "CWE-78", "published": "2024-11-18", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-3393", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability", "dateAdded": "2024-12-30", "shortDescription": "Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-01-20", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393", "vendor": "palo-alto-networks", "nvd": { "cvss": 7.5, "cwe": "CWE-754", "published": "2024-12-27", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-0108", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "dateAdded": "2025-02-18", "shortDescription": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-03-11", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2025-0108 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0108", "vendor": "palo-alto-networks", "nvd": { "cvss": 9.1, "cwe": "CWE-306", "published": "2025-02-12", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-0111", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS File Read Vulnerability", "dateAdded": "2025-02-20", "shortDescription": "Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-03-13", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2025-0111 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0111", "vendor": "palo-alto-networks", "nvd": { "cvss": 6.5, "cwe": "CWE-73", "published": "2025-02-12", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-0300", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "dateAdded": "2026-05-06", "shortDescription": "Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.", "dueDate": "2026-05-09", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2026-0300 ; https://nvd.nist.gov/vuln/detail/CVE-2026-0300", "vendor": "palo-alto-networks", "nvd": { "cvss": 9.8, "cwe": "CWE-787", "published": "2026-05-06", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-0257", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "dateAdded": "2026-05-29", "shortDescription": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2026-06-01", "knownRansomwareCampaignUse": "Known", "notes": "https://security.paloaltonetworks.com/CVE-2026-0257 ; https://nvd.nist.gov/vuln/detail/CVE-2026-0257", "vendor": "palo-alto-networks", "nvd": { "cvss": 9.1, "cwe": "CWE-565", "published": "2026-05-13", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-0322", "vendorProject": "Palo Alto Networks", "product": "PAN-OS", "vulnerabilityName": "Palo Alto Networks PAN-OS Code Injection Vulnerability", "dateAdded": "2026-10-14", "shortDescription": "Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-10-17", "knownRansomwareCampaignUse": "Unknown", "notes": "https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322", "vendor": "palo-alto-networks", "nvd": { "cvss": 7.2, "cwe": "CWE-94", "published": "2026-10-14", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-7481", "vendorProject": "SonicWall", "product": "SMA100", "vulnerabilityName": "SonicWall SMA100 SQL Injection Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-7481", "vendor": "sonicwall", "nvd": { "cvss": 7.5, "cwe": "CWE-89", "published": "2019-12-17", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-20016", "vendorProject": "SonicWall", "product": "SSLVPN SMA100", "vulnerabilityName": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2021-11-17", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-20016", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2021-02-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-20038", "vendorProject": "SonicWall", "product": "SMA 100 Appliances", "vulnerabilityName": "SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability", "dateAdded": "2022-01-28", "shortDescription": "SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-02-11", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-20038", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-121", "published": "2021-12-08", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-5135", "vendorProject": "SonicWall", "product": "SonicOS", "vulnerabilityName": "SonicWall SonicOS Buffer Overflow Vulnerability", "dateAdded": "2022-03-15", "shortDescription": "A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-05", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-5135", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-120", "published": "2020-10-12", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2019-7483", "vendorProject": "SonicWall", "product": "SMA100", "vulnerabilityName": "SonicWall SMA100 Directory Traversal Vulnerability", "dateAdded": "2022-03-28", "shortDescription": "In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-18", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-7483", "vendor": "sonicwall", "nvd": { "cvss": 7.5, "cwe": "CWE-22", "published": "2019-12-19", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-20028", "vendorProject": "SonicWall", "product": "Secure Remote Access (SRA)", "vulnerabilityName": "SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability", "dateAdded": "2022-03-28", "shortDescription": "SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.", "requiredAction": "The impacted product is end-of-life and should be disconnected if still in use.", "dueDate": "2022-04-18", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-20028", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2021-08-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-40766", "vendorProject": "SonicWall", "product": "SonicOS", "vulnerabilityName": "SonicWall SonicOS Improper Access Control Vulnerability", "dateAdded": "2024-09-09", "shortDescription": "SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-09-30", "knownRansomwareCampaignUse": "Known", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015; https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40766", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-284", "published": "2024-08-23", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-23006", "vendorProject": "SonicWall", "product": "SMA1000 Appliances", "vulnerabilityName": "SonicWall SMA1000 Appliances Deserialization Vulnerability", "dateAdded": "2025-01-24", "shortDescription": "SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-02-14", "knownRansomwareCampaignUse": "Known", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-502", "published": "2025-01-23", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-53704", "vendorProject": "SonicWall", "product": "SonicOS", "vulnerabilityName": "SonicWall SonicOS SSLVPN Improper Authentication Vulnerability", "dateAdded": "2025-02-18", "shortDescription": "SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-03-11", "knownRansomwareCampaignUse": "Known", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53704", "vendor": "sonicwall", "nvd": { "cvss": 9.8, "cwe": "CWE-287", "published": "2025-01-09", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2021-20035", "vendorProject": "SonicWall", "product": "SMA100 Appliances", "vulnerabilityName": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "dateAdded": "2025-04-16", "shortDescription": "SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-05-07", "knownRansomwareCampaignUse": "Unknown", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022 ; https://nvd.nist.gov/vuln/detail/CVE-2021-20035", "vendor": "sonicwall", "nvd": { "cvss": 6.5, "cwe": "CWE-78", "published": "2021-09-27", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-44221", "vendorProject": "SonicWall", "product": "SMA100 Appliances", "vulnerabilityName": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "dateAdded": "2025-05-01", "shortDescription": "SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-05-22", "knownRansomwareCampaignUse": "Unknown", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018 ; https://nvd.nist.gov/vuln/detail/CVE-2023-44221", "vendor": "sonicwall", "nvd": { "cvss": 7.2, "cwe": "CWE-78", "published": "2023-12-05", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-40602", "vendorProject": "SonicWall", "product": "SMA1000 appliance", "vulnerabilityName": "SonicWall SMA1000 Missing Authorization Vulnerability", "dateAdded": "2025-12-17", "shortDescription": "SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable", "dueDate": "2025-12-24", "knownRansomwareCampaignUse": "Unknown", "notes": "Check for signs of potential compromise on all internet accessible SonicWall SMA1000 instances after applying mitigations. For more information please see: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40602", "vendor": "sonicwall", "nvd": { "cvss": 6.6, "cwe": "CWE-250", "published": "2025-12-18", "severity": "MEDIUM" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-15409", "vendorProject": "SonicWall", "product": "SMA1000 Appliances", "vulnerabilityName": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "dateAdded": "2026-07-14", "shortDescription": "SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-07-17", "knownRansomwareCampaignUse": "Known", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-15409", "vendor": "sonicwall", "nvd": { "cvss": 10.0, "cwe": "CWE-918", "published": "2026-07-14", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-15410", "vendorProject": "SonicWall", "product": "SMA1000 Appliances", "vulnerabilityName": "SonicWall SMA1000 Appliances Code Injection Vulnerability", "dateAdded": "2026-07-14", "shortDescription": "SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-07-17", "knownRansomwareCampaignUse": "Known", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-15410", "vendor": "sonicwall", "nvd": { "cvss": 7.2, "cwe": "CWE-94", "published": "2026-07-14", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-83548", "vendorProject": "SonicWall", "product": "SMA1000 Appliances", "vulnerabilityName": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "dateAdded": "2026-09-02", "shortDescription": "SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-05", "knownRansomwareCampaignUse": "Unknown", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-83548", "vendor": "sonicwall", "nvd": { "cvss": 10.0, "cwe": "CWE-441", "published": "2026-09-01", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2026-83549", "vendorProject": "SonicWall", "product": "SMA1000 Appliances", "vulnerabilityName": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "dateAdded": "2026-09-02", "shortDescription": "SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.", "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "dueDate": "2026-09-05", "knownRansomwareCampaignUse": "Unknown", "notes": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-83549", "vendor": "sonicwall", "nvd": { "cvss": 7.8, "cwe": "CWE-78", "published": "2026-09-01", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-12271", "vendorProject": "Sophos", "product": "SFOS", "vulnerabilityName": "Sophos SFOS SQL Injection Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-12271", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2020-04-27", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-25223", "vendorProject": "Sophos", "product": "SG UTM", "vulnerabilityName": "Sophos SG UTM Remote Code Execution Vulnerability", "dateAdded": "2022-03-25", "shortDescription": "A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-25223", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-78", "published": "2020-09-25", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-1040", "vendorProject": "Sophos", "product": "Firewall", "vulnerabilityName": "Sophos Firewall Authentication Bypass Vulnerability", "dateAdded": "2022-03-31", "shortDescription": "An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-21", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2022-1040", "vendor": "sophos", "nvd": { "cvss": 9.8, "published": "2022-03-25", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-3236", "vendorProject": "Sophos", "product": "Firewall", "vulnerabilityName": "Sophos Firewall Code Injection Vulnerability", "dateAdded": "2022-09-23", "shortDescription": "A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-10-14", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce; https://nvd.nist.gov/vuln/detail/CVE-2022-3236", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-94", "published": "2022-09-23", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-1671", "vendorProject": "Sophos", "product": "Web Appliance", "vulnerabilityName": "Sophos Web Appliance Command Injection Vulnerability", "dateAdded": "2023-11-16", "shortDescription": "Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2023-12-07", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce; https://nvd.nist.gov/vuln/detail/CVE-2023-1671", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-77", "published": "2023-04-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-15069", "vendorProject": "Sophos", "product": "XG Firewall", "vulnerabilityName": "Sophos XG Firewall Buffer Overflow Vulnerability", "dateAdded": "2025-02-06", "shortDescription": "Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the \"HTTP/S bookmark\" feature.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-02-27", "knownRansomwareCampaignUse": "Unknown", "notes": "https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal ; https://nvd.nist.gov/vuln/detail/CVE-2020-15069", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-120", "published": "2020-06-29", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-29574", "vendorProject": "Sophos", "product": "CyberoamOS", "vulnerabilityName": "CyberoamOS (CROS) SQL Injection Vulnerability", "dateAdded": "2025-02-06", "shortDescription": "CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.", "requiredAction": "The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.", "dueDate": "2025-02-27", "knownRansomwareCampaignUse": "Known", "notes": "https://support.sophos.com/support/s/article/KBA-000007526 ; https://nvd.nist.gov/vuln/detail/CVE-2020-29574", "vendor": "sophos", "nvd": { "cvss": 9.8, "cwe": "CWE-89", "published": "2020-12-11", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-26318", "vendorProject": "WatchGuard", "product": "Firebox and XTM Appliances", "vulnerabilityName": "WatchGuard Firebox and XTM Appliances Arbitrary Code Execution", "dateAdded": "2022-03-25", "shortDescription": "On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-04-15", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2022-26318", "vendor": "watchguard", "nvd": { "cvss": 9.8, "published": "2022-03-04", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-23176", "vendorProject": "WatchGuard", "product": "Firebox and XTM", "vulnerabilityName": "WatchGuard Firebox and XTM Privilege Escalation Vulnerability", "dateAdded": "2022-04-11", "shortDescription": "WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-02", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2022-23176", "vendor": "watchguard", "nvd": { "cvss": 8.8, "published": "2022-02-24", "severity": "HIGH" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-9242", "vendorProject": "WatchGuard", "product": "Firebox", "vulnerabilityName": "WatchGuard Firebox Out-of-Bounds Write Vulnerability", "dateAdded": "2025-11-12", "shortDescription": "WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-12-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 ; https://nvd.nist.gov/vuln/detail/CVE-2025-9242", "vendor": "watchguard", "nvd": { "cvss": 9.8, "cwe": "CWE-787", "published": "2025-09-17", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2025-14733", "vendorProject": "WatchGuard", "product": "Firebox", "vulnerabilityName": "WatchGuard Firebox Out of Bounds Write Vulnerability", "dateAdded": "2025-12-19", "shortDescription": "WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "dueDate": "2025-12-26", "knownRansomwareCampaignUse": "Known", "notes": "Check for signs of potential compromise on all internet accessible instances after applying mitigations. For more information please see: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00027 ; https://nvd.nist.gov/vuln/detail/CVE-2025-14733", "vendor": "watchguard", "nvd": { "cvss": 9.8, "cwe": "CWE-787", "published": "2025-12-19", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2020-29583", "vendorProject": "Zyxel", "product": "Multiple Products", "vulnerabilityName": "Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability", "dateAdded": "2021-11-03", "shortDescription": "Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account (\"zyfwp\") with an unchangeable password.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-05-03", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2020-29583", "vendor": "zyxel", "nvd": { "cvss": 9.8, "cwe": "CWE-522", "published": "2020-12-22", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2022-30525", "vendorProject": "Zyxel", "product": "Multiple Firewalls", "vulnerabilityName": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "dateAdded": "2022-05-16", "shortDescription": "A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2022-06-06", "knownRansomwareCampaignUse": "Unknown", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2022-30525", "vendor": "zyxel", "nvd": { "cvss": 9.8, "cwe": "CWE-78", "published": "2022-05-12", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-28771", "vendorProject": "Zyxel", "product": "Multiple Firewalls", "vulnerabilityName": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "dateAdded": "2023-05-31", "shortDescription": "Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker to execute OS commands remotely by sending crafted packets to an affected device.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-06-21", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-28771", "vendor": "zyxel", "nvd": { "published": "2023-04-25", "cvss": 9.8, "severity": "CRITICAL", "cwe": "CWE-78" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-33009", "vendorProject": "Zyxel", "product": "Multiple Firewalls", "vulnerabilityName": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "dateAdded": "2023-06-05", "shortDescription": "Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-06-26", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-33009", "vendor": "zyxel", "nvd": { "published": "2023-05-24", "cvss": 9.8, "severity": "CRITICAL", "cwe": "CWE-120" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2023-33010", "vendorProject": "Zyxel", "product": "Multiple Firewalls", "vulnerabilityName": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "dateAdded": "2023-06-05", "shortDescription": "Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.", "requiredAction": "Apply updates per vendor instructions.", "dueDate": "2023-06-26", "knownRansomwareCampaignUse": "Unknown", "notes": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls; https://nvd.nist.gov/vuln/detail/CVE-2023-33010", "vendor": "zyxel", "nvd": { "cvss": 9.8, "cwe": "CWE-120", "published": "2023-05-24", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" }, { "cveID": "CVE-2024-11667", "vendorProject": "Zyxel", "product": "Multiple Firewalls", "vulnerabilityName": "Zyxel Multiple Firewalls Path Traversal Vulnerability", "dateAdded": "2024-12-03", "shortDescription": "Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "dueDate": "2024-12-24", "knownRansomwareCampaignUse": "Known", "notes": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-21-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-11667", "vendor": "zyxel", "nvd": { "cvss": 9.8, "cwe": "CWE-22", "published": "2024-11-27", "severity": "CRITICAL" }, "page": "https://myipscan.net/firewalls/" } ] } }