WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
CVE-2025-1547

7.5HIGH

Key Information:

Vendor

Watchguard

Status
Fireware Os
Vendor
CVE Published:
4 December 2025

What is CVE-2025-1547?

A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.2.

Affected Version(s)

Fireware OS 12.0 <= 12.5.12+701324

Fireware OS 12.6 <= 12.11.2

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-...

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cody Sixteen
JSON
.
CVE-2025-1547 : Stack-Based Buffer Overflow Vulnerability in WatchGuard Fireware OS