WatchGuard Firebox Leftover Debug Code Vulnerability

A vulnerability exists in WatchGuard Firebox devices running Fireware OS versions 12.0 prior to 12.11.2. An authenticated admin user with access to both the management WebUI and command line interface can exploit this vulnerability by uploading a platform and version-specific diagnostic package. After the package is uploaded, the user can execute a leftover diagnostic command to enable a diagnostic debug shell.

Impact

Exploitation of this vulnerability allows for the activation of a diagnostic debug shell, which could potentially be misused to access or manipulate system functions or data.

Remediation

Users can upgrade to Fireware OS 12.11.3 or, for T15 and T35 models, to Fireware OS 12.5.13.