CVE-2024-5974

Published: Jul 9, 2024Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3.

Affected (3)

Products: Watchguard: Fireware

Watchguard

1 product

Fireware

Configuration A

3 vulnerable · 50 platform

Vulnerable Software	Affected Versions
Watchguard Fireware	From 11.9.4 to 12.5.12
Watchguard Fireware	From 12.6 to 12.10.4
Watchguard Fireware	Version 12.5.12 u1

Running on/with	Platform Versions
Watchguard Firebox M200	All versions
Watchguard Firebox M270	All versions
Watchguard Firebox M290	All versions
Watchguard Firebox M300	All versions
Watchguard Firebox M370	All versions
Watchguard Firebox M390	All versions
Watchguard Firebox M400	All versions
Watchguard Firebox M440	All versions
Watchguard Firebox M470	All versions
Watchguard Firebox M4800	All versions
Watchguard Firebox M500	All versions
Watchguard Firebox M570	All versions
Watchguard Firebox M5800	All versions
Watchguard Firebox M590	All versions
Watchguard Firebox M670	All versions
Watchguard Firebox M690	All versions
Watchguard Firebox T10	All versions
Watchguard Firebox T10 D	All versions
Watchguard Firebox T10 W	All versions
Watchguard Firebox T15	All versions
Watchguard Firebox T15 W	All versions
Watchguard Firebox T20	All versions
Watchguard Firebox T20 W	All versions
Watchguard Firebox T30	All versions
Watchguard Firebox T30 W	All versions
Watchguard Firebox T35	All versions
Watchguard Firebox T35 R	All versions
Watchguard Firebox T35 W	All versions
Watchguard Firebox T40	All versions
Watchguard Firebox T40 W	All versions
Watchguard Firebox T50	All versions
Watchguard Firebox T50 W	All versions
Watchguard Firebox T55	All versions
Watchguard Firebox T55 W	All versions
Watchguard Firebox T70	All versions
Watchguard Firebox T80	All versions
Watchguard Firebox Xtm1520 Rp	All versions
Watchguard Firebox Xtm1525 Rp	All versions
Watchguard Firebox Xtm2520	All versions
Watchguard Firebox Xtm850	All versions
Watchguard Firebox Xtm860	All versions
Watchguard Firebox Xtm870	All versions
Watchguard Firebox Xtm870 F	All versions
Watchguard Fireboxcloud	All versions
Watchguard Fireboxt Nv5	All versions
Watchguard Fireboxt T25	All versions
Watchguard Fireboxt T45	All versions
Watchguard Fireboxt T85	All versions
Watchguard Fireboxv	All versions
Watchguard Xtmv	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011

Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3

Vendor Advisory

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.