Buffer Overflow in WatchGuard Fireware OS Could Allow Arbitrary Code Execution

CVE-2024-5974

What is CVE-2024-5974?

A buffer overflow vulnerability found in WatchGuard's Fireware OS allows an authenticated remote attacker with privileged management access to potentially execute arbitrary code with system privileges. This flaw affects numerous versions of the Fireware OS ranging from 11.9.6 through 12.10.3, posing significant risks to the security framework of any deployed firewall. Organizations using these versions should prioritize applying available patches and updates to mitigate potential exploitation of this vulnerability.

References