What is CVE-2025-0178?

CVE-2025-0178 is a medium-severity vulnerability in Watchguard Fireboxcloud, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2025-02-14.

How severe is CVE-2025-0178?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Improper input validation in Watchguard Fireboxcloud

CVE-2025-0178

An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (13.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory, Vendor Advisory)
5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)

Frequently asked questions

What is CVE-2025-0178?: CVE-2025-0178 is a medium-severity vulnerability in Watchguard Fireboxcloud, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2025-02-14.
How severe is CVE-2025-0178?: Medium severity. CVSS v3 base score is 6.1 out of 10.