CVE-2022-23176

CVE-2022-23176 is a critical vulnerability affecting WatchGuard Firebox and XTM appliances running Fireware OS before versions 12.7.2_U1, 12.1.3_U3, and 12.5.7_U3. This flaw allows a remote attacker with unprivileged credentials to gain privileged management access to the system. With a CVSS score of 8.8 (HIGH), the vulnerability has a low attack complexity and can lead to complete compromise of confidentiality, integrity, and availability. Notably, this CVE is actively exploited in the wild, as confirmed by its presence in the KEV catalog and multiple media reports, including those detailing exploitation by Russian state-sponsored actors. Despite no public exploit code being available on Metasploit, Nuclei, or ExploitDB, its high community discussion and media coverage highlight its significant threat.