Argument Injection Vulnerability in WatchGuard Fireware OS

CVE-2022-31749

What is CVE-2022-31749?

An argument injection vulnerability exists in the diagnose and import pac commands of WatchGuard Fireware OS versions prior to 12.8.1, 12.1.4, and 12.5.10. This flaw allows an authenticated remote attacker with limited privileges to manipulate commands, potentially leading to unauthorized file uploads or reads in restricted locations on WatchGuard Firebox and XTM devices. Addressing this security issue is crucial for protecting sensitive information and ensuring the integrity of these appliances.

References