| Critical |
WGSA-2022-00004 |
Firebox Unauthenticated Arbitrary FIle Delete Vulnerability |
CVE-2022-25361 |
|
| Medium |
WGSA-2022-00003 |
Firebox Unauthorized Certificate Private Key Retrieval Vulnerability |
CVE-2022-25290 |
|
| Critical |
WGSA-2022-00002 |
Firebox Unauthenticated Remote Code Execution Vulnerability |
CVE-2022-26318 |
|
| High |
WGSA-2022-00001 |
Polkit pkexec Local Privilege Escalation Vulnerability (CVE-2021-4034) |
CVE-2021-4034 |
|
| High |
WGSA-2021-00005 |
Firebox WebUI Business Logic Vulnerability |
|
|
| High |
WGSA-2021-00004 |
Firebox Management Privilege Escallation Vulnerability |
CVE-2022-23176 |
|
| Critical |
WGSA-2021-00003 |
Log4j2 Remote Code Execution Vulnerability aka Log4Shell (CVE-2021-44228) |
CVE-2021-44228 |
|
| High |
WGSA-2021-00002 |
MacOS SSL VPN Privilege Escalation Vulnerability |
|
|
| High |
WGSA-2021-00001 |
Firebox Privilege Escalation Vulnerability |
|
|
| High |
WGSA-2019-00002 |
Inferring and hijacking VPN-tunneled TCP connections |
CVE-2019-14899 |
|
| High |
WGSA-2019-00001 |
TCP SACK PANIC – Kernel Vulnerabilities |
CVE-2019-11477, CVE-2019-11478, CVE-2019-11479 |
|
| Medium |
WGSA-2018-00001 |
Foreshadow Speculative Execution Attacks |
CVE-2018-3646, CVE-2018-3620, CVE-2018-3615 |
|