Integer Overflow Vulnerability in WatchGuard Firebox and XTM Appliances
CVE-2022-31789

9.8CRITICAL

Key Information:

Vendor

Watchguard

Status
Fireware
Vendor
CVE Published:
6 September 2022

What is CVE-2022-31789?

An integer overflow vulnerability exists within WatchGuard Firebox and XTM appliances that can be exploited by remote, unauthenticated attackers. This security flaw allows attackers to send specially crafted requests to management ports, triggering a buffer overflow condition that may lead to the execution of arbitrary code. Successful exploitation could compromise the integrity and confidentiality of the affected systems. The vulnerability has been addressed in multiple versions of Fireware OS.

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.