CVE-2022-25291

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

Link	Resource
https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html	Release Notes Vendor Advisory

Configuration 1

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u1:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u2:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:-:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.7.2:u1:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.7.2:-:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.5.9:u1:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.5.9:-:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u3:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u4:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u5:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u6:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u7:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

---

Published : 2022-02-24 03:15

Updated : 2022-03-04 03:07

---

NVD link : CVE-2022-25291

Mitre link : CVE-2022-25291

No products.

CWE-190