WatchGuard Firebox Out of Bounds Write Vulnerability (WatchGuard Fireware OS)
At a glance
- Source
- NVD
- EPSS
- EPSS 6.43 % · percentile 94 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- WatchGuard
- NVD status
- Analyzed
Description
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.
Weaknesses (CWE)
- CWE-787 — Out-of-bounds Write
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 4.0 | HIGH 8.6 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | WatchGuard |
| CVSS 4.0 | HIGH 8.6 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · 5d1c2695-1a31-4499-88ae-e847036fd7e3 (Secondary) |
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-9288
- GCVE · GCVE-0-2026-3342
Affected configurations (NVD CPE)
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 < 12.5.17cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 2025.1 < 2026.1.2cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 11.9 < 12.11.8
Affected products
| Product | Versions |
|---|---|
| WatchGuard · Fireware OS | affected 11.9 ≤ 11.12.4+541730 ; affected 12.0 ≤ 12.11.7 ; affected 12.5 ≤ 12.5.16 ; affected 2025.1 ≤ 2026.1.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |