Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-26239: An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged u...

CVE-2023-26239 · published 3 years ago

Summary

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user.

What to do

Update watchguard epp_firmware to version 8.00.22.0010 or later.
Update watchguard edr_firmware to version 8.00.22.0010 or later.
Update watchguard epdr_firmware to version 8.00.22.0010 or later.
Update watchguard panda_ad360_firmware to version 8.00.22.0010 or later.

Affected software

Vendor	Product	Affected versions
watchguard	epp_firmware	< 8.00.22.0010 `cpe:2.3:o:watchguard:epp_firmware::::::::`
watchguard	edr_firmware	< 8.00.22.0010 `cpe:2.3:o:watchguard:edr_firmware::::::::`
watchguard	epdr_firmware	< 8.00.22.0010 `cpe:2.3:o:watchguard:epdr_firmware::::::::`
watchguard	panda_ad360_firmware	< 8.00.22.0010 `cpe:2.3:o:watchguard:panda_ad360_firmware::::::::`

Original advisory text

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2023-00007 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-273Improper Check for Dropped Privileges

Timeline

Published5 Oct 2023

Updated26 Oct 2026

First seen29 Sep 2026

Sources

CVE-2023-26239 · NVD

Track software like this

Free during beta