CVE-2017-8055: WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler.

Security readout for executives and security teams

This flaw can let an attacker confirm valid usernames on an affected WatchGuard Firebox. By itself, it is not a full compromise, but it can reduce guesswork for password attacks, phishing, or follow-on intrusion attempts against firewall administration paths. Exposure is most likely for WatchGuard Firebox deployments running Fireware v11.12.1 or earlier where the XML-RPC login handler is reachable by untrusted users. The source bundle does not define exact models, configurations, or network prerequisites. Treat this as a moderate-priority firewall hardening issue. It does not show direct takeover, but username discovery on perimeter security devices can materially assist later attacks. Update or validate affected Fireware promptly. Mitigation focus: Inventory WatchGuard Firebox devices and record Fireware versions.; Prioritize devices running Fireware v11.12.1 or earlier.; Review WatchGuard advisory and Fireware 11.12.2 release notes for remediation..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.