Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

WatchGuard Server Center lets local users install malicious DLL

CVE-2013-5701 · published 13 years ago
Summary

The Log Collector and WebBlocker Server parts of WatchGuard Server Center can be fooled into loading a DLL file placed in their program folder. A person with local access could drop a harmful wgpr.dll and gain higher privileges on the system. Apply the latest WatchGuard updates and restrict write access to the application directories to prevent this.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
watchguard server_center <= 11.7.4
11.7.3
cpe:2.3:a:watchguard:server_center:*:*:*:*:*:*:*:*
Original advisory text
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and ...
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published3 Oct 2013
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-5701 · NVD
Track software like this
Free during beta