Vulnerabilities > Watchguard > Fireware > 12.8.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-09 CVE-2024-5974 Classic Buffer Overflow vulnerability in Watchguard Fireware
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3.
network
low complexity
watchguard CWE-120
7.2
2022-09-06 CVE-2022-31789 Integer Overflow or Wraparound vulnerability in Watchguard Fireware
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports.
network
low complexity
watchguard CWE-190
critical
9.8
2022-09-06 CVE-2022-31791 Unspecified vulnerability in Watchguard Fireware
WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions.
local
low complexity
watchguard
7.8
2022-09-06 CVE-2022-31792 Cross-site Scripting vulnerability in Watchguard Fireware
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances.
network
low complexity
watchguard CWE-79
5.4
2022-09-06 CVE-2022-31790 Unspecified vulnerability in Watchguard Fireware
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints.
network
low complexity
watchguard
7.5