Stack-Based Buffer Overflow Vulnerability in WatchGuard Fireware OS
CVE-2025-1547

7.5HIGH

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
4 December 2025

What is CVE-2025-1547?

A stack-based buffer overflow vulnerability exists in the certificate request command of WatchGuard Fireware OS, enabling authenticated privileged users to execute arbitrary code using specially crafted CLI commands. This vulnerability impacts a range of Fireware OS versions, potentially exposing systems to unauthorized actions if exploited.

Affected Version(s)

Fireware OS Default 12.0 <= 12.11.3

Fireware OS T15/T35 12.0 < 12.5.13

References

https://psirt.watchguard.com/CVE-2025-1547
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-...
vendor-advisory

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cody Sixteen
.