Advisories · Technology
WatchGuard Fireware OS.
Every CVE that names WatchGuard Fireware OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
- WatchGuard Fireware OS
- Command injection
- Authentication bypass
- CVSS 7.2 High
Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-129
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 7.2 High
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
- WatchGuard Fireware OS
- Path traversal
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 6.1 Medium
Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CWE-129
- CVSS 8.7 High
Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
- WatchGuard Fireware OS
- Other injection
- CWE-20
- CVSS 8.6 High
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 5.6 Medium
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
- WatchGuard Fireware OS
- Authentication bypass
- CWE-346
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
- WatchGuard Fireware OS
- Memory corruption
- Authentication bypass
- CVSS 7.1 High
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
- WatchGuard Fireware OS
- Path traversal
- CWE-377
- CVSS 9.5 CriticalCritical · CVSS 9+
Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CWE-1284
- CVSS 6.0 Medium
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
- WatchGuard Fireware OS
- Authentication bypass
- CWE-345
- CVSS 8.7 High
Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-248
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
- WatchGuard Fireware OS
- Command injection
- Authentication bypass
- CVSS 8.7 High
Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Resource Exhaustion in Login Process Allows Denial of Service
- WatchGuard Fireware OS
- Denial of service
- CWE-409
- CVSS 8.6 High
Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 7.2 High
Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access
- WatchGuard Fireware OS
- Broken access control
- CVSS 7.5 High
Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution
- WatchGuard Fireware OS
- Insecure deserialization
- CVSS 9.2 CriticalCritical · CVSS 9+
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution
- WatchGuard Fireware OS
- Code injection
- Weak cryptography or TLS
- CVSS 8.2 High
Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read
- WatchGuard Fireware OS
- Path traversal
- CVSS 8.2 High
Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-1284
- CVSS 7.1 High
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B
- WatchGuard Fireware OS
- Information disclosure
- Denial of service
- CVSS 7.1 High
Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
- WatchGuard Fireware OS
- Denial of service
- CVSS 5.3 Medium
Fireware OS Improper Authorization in Access Portal Reverse Proxy
- WatchGuard Fireware OS
- Path traversal
- Broken access control
- CVSS 7.1 High
Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A
- WatchGuard Fireware OS
- Path traversal
- Memory corruption
- CVSS 8.2 High
Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.2 High
Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-1284
- CVSS 9.3 CriticalCritical · CVSS 9+
Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint
- WatchGuard Fireware OS
- Memory corruption
- Hard-coded credentials
- CVSS 9.3 CriticalCritical · CVSS 9+
Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.7 High
Fireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)
- WatchGuard Fireware OS
- Memory corruption
- CWE-20
- CVSS 9.3 CriticalCritical · CVSS 9+
Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution
- WatchGuard Fireware OS
- Memory corruption
- CWE-129
- CVSS 8.6 High
Fireware OS Authenticated Buffer Overflow in wgagent
- WatchGuard Fireware OS
- Memory corruption
- CVSS 6.9 Medium
Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-1284
- CVSS 8.6 High
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.6 High
WatchGuard Firebox networkd Out of Bounds Write Vulnerability
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.6 High
WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI
- WatchGuard Fireware OS
- Path traversal
- CVSS 7.7 High
WatchGuard Firebox admd Out of Bounds Write Vulnerability
- WatchGuard Fireware OS
- Memory corruption
- CVSS 5.9 Medium
WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database
- WatchGuard Fireware OS
- Hard-coded credentials
- CVSS 8.7 High
Null Pointer Dereference in WatchGuard Fireware OS iked Process
- WatchGuard Fireware OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.6 High
WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
- WatchGuard Fireware OS
- Weak cryptography or TLS
- CVSS 8.6 High
WatchGuard Firebox wgagent Out of Bounds Write Vulnerability
- WatchGuard Fireware OS
- Memory corruption
- CVSS 8.6 High
WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability
- WatchGuard Fireware OS
- Memory corruption
- CVSS 4.8 Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
- WatchGuard Fireware OS
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
- WatchGuard Fireware OS
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
- WatchGuard Fireware OS
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
- WatchGuard Fireware OS
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
- WatchGuard Fireware OS
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
- WatchGuard Fireware OS
- Insecure deserialization