Vulnerabilities

TI-2025-01333 CVE-2025-1547 · GHSA-cx46-cw26-h8h6

WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command

LOW 35

A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00378 Published 2025-12-04 Fixed in 12.5.13 CWE-121

TI-2025-06316 CVE-2025-6946 · GHSA-rg89-p3mq-2mpq

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration

LOW 22

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00254 Published 2025-12-04 Fixed in 12.11.3, 12.5.13 CWE-79

Vulnerabilities

Filters

WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration