Medium severity · published Apr 22, 2017
CVE-2017-8055
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler
5.3
CVSS
1.6%
EPSS
No
On KEV
Description
WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Fireware · Watchguard
through 11.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-8055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-8055
Vendor Advisory
http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGSAU
Exploit
https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt
Exploit
https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia
Release Notes
https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html
More from Fireware
9.8
CVE-2025-14733
WatchGuard Firebox iked Out of Bounds Write Vulnerability
9.8
CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
9.8
CVE-2022-26318
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
8.8
CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
9.8
CVE-2026-86131
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution