This vulnerability in WatchGuard Fireware OS (version 12.0) stems from improper validation of the HTTP Host header in requests sent to the Web UI. An attacker with network access can manipulate this header to perform attacks such as redirecting users to malicious websites, poisoning the web cache, or injecting malicious JavaScript into responses. The CVSS 4.0 base score is 5.1, indicating medium severity. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation could allow an unauthenticated attacker to manipulate web traffic related to the Fireware OS Web UI, potentially redirecting users to malicious sites, poisoning cached web content, or injecting malicious scripts. This could lead to user deception or client-side attacks, but does not indicate direct compromise of the underlying system or elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific temporary mitigations are provided by the vendor at this time.