What is CVE-2025-0178?

CVE-2025-0178 is a medium-severity vulnerability in Watchguard Fireboxcloud, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2025-02-14.

How severe is CVE-2025-0178?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Improper input validation in Watchguard Fireboxcloud

CVE-2025-0178

Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to maliciou…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Watchguard Fireboxcloud
Watchguard Firebox_m270
Watchguard Firebox_m290
Watchguard Firebox_m370
Watchguard Firebox_m390
Watchguard Firebox_m440
Watchguard Firebox_m4600
Watchguard Firebox_m470
Watchguard Firebox_m4800
Watchguard Firebox_m5600

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

5d1c2695-1a31-4499-88ae-e847036fd7e3 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-0178?: CVE-2025-0178 is a medium-severity vulnerability in Watchguard Fireboxcloud, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2025-02-14.
How severe is CVE-2025-0178?: Medium severity. CVSS v3 base score is 6.1 out of 10.