CVE-2022-25293: Buffer Overflow
A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-25293.
What is the severity of CVE-2022-25293?
The severity of CVE-2022-25293 is high with a severity value of 8.8.
Which software versions are affected by CVE-2022-25293?
Fireware versions before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.5.9.x before 12.5.9_U2 are affected by CVE-2022-25293.
How can an attacker exploit CVE-2022-25293?
An authenticated remote attacker can potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image.
Is there a fix available for CVE-2022-25293?
Yes, a fix is available in Fireware OS version 12.7.2_U2 and above.