Watchguard XCS remote code execution vulnerability


Description   A remote code execution vulnerability in Watchguard XCS allows arbitrary shell commands execution via 'id' parameter of 'ADMIN/mailqueue.spl' page.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Block Block Block
Alarm Level Major Minor Minor Major
     
References   URL: http://www.security-assessment.com/files/documents/advisory/Watchguard-XCS-final.pdf
     
Available since   ASQ v5.0.0
     
Protects   Watchguard XCS Multiple Arbitrary Remote Commands Execution Vulnerabilities
100 last CVE   CVE-2015-5453
CVE-2015-5452


 
 
 
 
 Risk level 
High