Vulnerability Details : CVE-2013-6021
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2013-6021
Probability of exploitation activity in the next 30 days: 12.52%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 95 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-6021
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2013-6021
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-6021
-
https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/
WatchGuard – CVE-2013-6021 – Stack Based Buffer Overflow Exploit | Fun Over IPExploit
-
http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/
WatchGuard Dimension and Fireware XTM 11.8 | Secplicity - Security SimplifiedVendor Advisory
-
http://www.securityfocus.com/bid/63227
Watchguard Extensible Threat Management CVE-2013-6021 Stack Based Buffer Overflow VulnerabilityExploit
-
http://www.kb.cert.org/vuls/id/233990
VU#233990 - Watchguard Extensible Threat Management (XTM) appliance version 11.7.4 contains a buffer overflow vulnerabilityPatch;US Government Resource
-
http://www.exploit-db.com/exploits/29273
Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow - Hardware remote ExploitExploit
-
http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/
WatchGuard's XTM 11.8 Software Fixes Buffer Overflow & XSS Vulnerabilities | Secplicity - Security SimplifiedVendor Advisory
Products affected by CVE-2013-6021
- cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.7.2:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.6.6:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.4:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.3.6:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.5.3:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.3:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.1:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.2.3:*:*:*:*:*:*:*
- cpe:2.3:o:watchguard:fireware:11.0.2:*:*:*:*:*:*:*