PT-2024-6555
CVE-2024-6593
·
Published
2024-09-25
·
Updated
2026-08-08
Description by
CVSS 2.0
9.4
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions:
WatchGuard Authentication Gateway versions through 12.10.2
Description:
The issue is related to an Incorrect Authorization vulnerability in the WatchGuard Authentication Gateway, allowing an attacker with network access to execute restricted management commands. This could potentially lead to unauthorized access to user credentials. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
Recommendations:
For versions through 12.10.2, upgrade to a newer version to resolve the issue. As a temporary workaround, consider restricting access to the Authentication Gateway to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾