Critical WatchGuard Firebox Firewall Flaw Exploited by Hackers

[johny899]

Here’s an interesting story — researchers have found a severe vulnerability in the WatchGuard Firebox firewall system. Hackers are already trying to use this vulnerability to gain access to company data. For those who rely upon the WatchGuard firewall, now is not the time to put off updating your firewall.

There was a time when I thought my firewall could never be compromised until I read this news. There is no magic solution to network security, but firewalls are designed to provide a level of protection for our businesses.

What’s Happening?​

The vulnerability is a Remote Code Execution (RCE) that allows an attacker to execute commands remotely from any computer connected to the World Wide Web. This is frightening news because this allows hackers to have direct access to our networks.

To put it another way, it’s like leaving the back door to your office wide open. Anyone who knows the secret to getting in can walk into your office and take anything they want.

Who Is At Risk?​

• All Firebox Firewall devices with the Fireware OS version 12.7.2 or older
• Any Firebox Firewall device that is directly connected to the internet (No NAT, No VPN)
• Any business or small office that hasn’t/doesn’t regularly update their Firebox Series firewall’s firmware

Even if you’re using your Firebox firewall in what you think of as an “offline” mode, the attacker can still reach you if the interface to your Firebox firewall is connected to the internet.

The Importance Of Protecting Yourself​

What I would do if I had my own network.

• Upgrade to the newest Fireware OS as soon as possible!
• Restrict remote access for managing your firewall.
• Monitor your network logs to identify any suspicious network traffic.

These 3 things are easy to perform and save many hours of time in the future.

Why This Is Important to Know​

This particular vulnerability is a good example of how all security devices can be abused unless the system is regularly maintained and updated. Firewalls are not "install and forget" systems. You still need to give your firewall the care and attention it needs.