WatchGuard Fireware OS Stack-Based Buffer Overflow Vulnerability in Certificate Request Command Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in WatchGuard Fireware OS versions 12.0 through 12.5.12+701324 and 12.6 through 12.11.2. This vulnerability arises in the certificate request command, where an authenticated privileged user could execute arbitrary code by sending specially crafted CLI commands.

Impact

Exploitation of this vulnerability could lead to authenticated privileged users executing arbitrary code on the affected device.

Remediation

Users can upgrade to Fireware OS 12.11.3 or, for T15 and T35 models, to Fireware OS 12.5.13. WatchGuard Firebox administrators should also avoid exposing management interfaces to untrusted networks and can refer to WatchGuard's Firebox Remote Management Best Practices for additional guidance.