Description
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
References
- 20020926 Watchguard firewall appliances security issues mailing-list
- 20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances mailing-list
- 4831 vdb-entry
- firebox-vclass-cli-admin-privileges(10218) vdb-entry
- 5815 vdb-entry