« Volver al listado

CVE-2013-6021

Estado: ModificadaAlta (9.3)—💥 Exploit

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Watchguard — Fireware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6021",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-19T10:36:08.573",
  "references": [
    {
      "url": "http://osvdb.org/98752",
      "source": "cret@cert.org"
    },
    {
      "url": "http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/29273",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/233990",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/63227",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://osvdb.org/98752",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/29273",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/233990",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/63227",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de buffer en WGagent de WatchGuard WSM y Fireware anterior a la versión 11.8 permite a atacantes remotos ejecutar código arbitrario a través de un valor largo de sessionid en una cookie."
    }
  ],
  "lastModified": "2026-06-16T23:59:54.243",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "483E6F00-4E34-4C92-99A9-827C378DD49B",
              "versionEndIncluding": "11.7.4"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD6B3878-39D2-4BC0-B5A0-0DF5BAF8D5B8"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A9CA056-EDEE-4036-8F07-68020E7B33DE"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A794EBD1-222F-44F8-BE8B-5227CEE1C037"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70C80D67-B0A6-417D-8DC0-E465B453C49B"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F752FF0B-39B4-4CF0-8C68-69A8C5D1C510"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0365E8B-7A54-4773-90C4-F6D6518EBBA6"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "372E22FB-2CFE-423F-8B6C-4516F44CAE5E"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0710A14-DBA5-4FBA-B1F2-FE2505160A15"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FB4372D-7CA3-414C-B56F-7D3731B0AF0D"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C1B8F8C-04BA-4DE2-A59C-559C1B596E9A"
            },
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:11.7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67DC54BF-0714-4070-A9BC-4BB65EA9B7BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}