This vulnerability (CVE-2025-1545) in WatchGuard Fireware OS involves an XPath Injection flaw (CWE-91) that can be exploited remotely without authentication. An attacker can leverage this flaw through the exposed authentication or management web interface on Firebox systems configured with authentication hotspots to extract sensitive configuration information. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality. There is no information about available patches or vendor advisories indicating remediation status.

Successful exploitation allows an unauthenticated remote attacker to retrieve sensitive configuration data from the Firebox device, potentially exposing critical information that could aid further attacks or compromise network security. The impact is limited to confidentiality as per the CVSS vector, with no integrity or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict access to the authentication and management web interfaces to trusted networks and monitor for unusual access patterns. Avoid exposing authentication hotspots unnecessarily until a patch or official mitigation is available.