CVE-2017-8056 XML external entity in n/a

What is CVE-2017-8056?

CVE-2017-8056 is a medium-severity vulnerability in Watchguard Fireware, published on 22 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.

Weakness: CWE-611

Which versions are affected by CVE-2017-8056?

It affects 1 product.

Products include Watchguard Fireware.

How do I fix CVE-2017-8056?

No fix has been published for CVE-2017-8056 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-8056 being exploited?

There is no known exploitation of CVE-2017-8056 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in Watchguard Fireware

• CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution Exploited Critical 9.8
• CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Exploited Critical 9.3
• CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Exploited Critical 9.3
• CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Exploited High 8.8
• CVE-2022-31789 Integer overflow in n/a Critical 9.8

All Watchguard Fireware vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pjmc-xjq4-h7jm.