NetSight
critical9.8

CVE-2022-31789

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arb…

Impact

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Affected products

VendorProductAffected versions
WatchguardFireware
from 12.0.0 before 12.1.4
from 12.2.0 before 12.5.10
Versions 12.6.1, 12.6.3, 12.6.4, 12.7.0

Weakness classification

References