{“lastseen”:”2025-11-03T16:52:09″,”description”:”The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative…”,”published”:”2025-11-03T00:00:00″,”modified”:”2025-11-03T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 WatchGuard Firebox Default Credentials \/ SSH Access”,”source”:””,”references”:””,”id”:”PACKETSTORM:211136″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-59396″],”sourceData”:”CVE-2025-59396 \u2013 WatchGuard Firebox Default Configuration Allows Unauthorized SSH Access via Port 4118\\n Description\\n The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 using the default credentials (admin:readwrite). This configuration exposes the device to remote attackers who can gain full administrative access without prior authentication.\\n Impact\\n An unauthenticated attacker can:\\n \\n Retrieve sensitive information such as ARP tables, network configurations, user accounts, feature keys, and device location data.\\n Modify or disable firewall rules and security policies.\\n Perform lateral movement within the internal network.\\n Exfiltrate data or disrupt services.\\n \\n This results in a complete compromise of the Firebox appliance and the network it protects.\\n Vulnerability Type\\n \\n Misconfiguration \/ Insecure Defaults\\n Authentication Bypass via Default Credentials\\n \\n Attack Vector\\n Remote access via SSH on port 4118 using:\\n \\n Username: admin\\n Password: readwrite\\n \\n Tools like PuTTY or any SSH client can be used to exploit this vulnerability.\\n Affected Product\\n \\n Vendor: WatchGuard\\n Product: Firebox series (specific models and firmware versions TBD)\\n Component: SSH Service (Port 4118)\\n Status: Exposed by default\\n \\n Discoverers\\n \\n Chanakya Neelarapu\\n Mark Gibson\\n \\n CVE ID\\n \\n CVE-2025-59396\\n \\n Impacts\\n \\n \u2705 Remote Code Execution\\n \u2705 Privilege Escalation\\n \u2705 Information Disclosure\\n \u2705 Network Exposure and Lateral Movement\\n \\n Reference\\n \\n https:\/\/www.watchguard.com\/wgrd-products\/firewalls”,”sourceHref”:”https:\/\/packetstorm.news\/download\/211136″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/211136\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-03T16:52:09″,”description”:”The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative…”,”published”:”2025-11-03T00:00:00″,”modified”:”2025-11-03T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 WatchGuard Firebox Default Credentials \/ SSH Access”,”source”:””,”references”:””,”id”:”PACKETSTORM:211136″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-59396″],”sourceData”:”CVE-2025-59396 \u2013 WatchGuard Firebox Default Configuration Allows Unauthorized…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-24502","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n