WatchGuard Fireware

WatchGuard Firebox iked Out of Bounds Write Vulnerability

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

WatchGuard Firebox iked Out of Bounds Write Vulnerability

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

WatchGuard Firebox admd Out of Bounds Write Vulnerability

Null Pointer Dereference in WatchGuard Fireware OS iked Process

WatchGuard Firebox iked Memory Corruption Vulnerability

WatchGuard Firebox Arbitrary File Write vis Path Traversal in Fireware Web UI

Firebox Authenticated Buffer Overflow Vulnerability

WatchGuard Firebox wgagent Out of Bounds Write Vulnerability

WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability

WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration

WatchGuard Firebox Out of Bounds Write Vulnerability

WatchGuard Firebox networkd Out of Bounds Write Vulnerability

WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler

WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI

WatchGuard Firebox Authenticated Out of Bounds Write in certd

WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS

WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

WatchGuard Firebox XPath Injection Vulnerability in Web CGI

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login attempts, UI management of the device becomes impossible.

WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command

WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI

WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization

WatchGuard Firebox System Integrity Check Bypass

WatchGuard Firebox Boot Time System Integrity Check Bypass

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.