Lucene search

WatchGuardCVE-2024-5974

HistoryJul 09, 2024 - 3:15 a.m.

CVE-2024-5974

2024-07-0903:15:02

CWE-120

WatchGuard

web.nvd.nist.gov

buffer overflow

remote attacker

arbitrary code execution

fireware os

watchguard

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall.
This issue affects Fireware OS: from 11.9.6 through 12.10.3.

Affected configurations

Nvd

Node

watchguardfirewareRange11.9.4–12.5.12

watchguardfirewareRange12.6–12.10.4

watchguardfirewareMatch12.5.12u1

AND

watchguardfirebox_m200Match-

watchguardfirebox_m270Match-

watchguardfirebox_m290Match-

watchguardfirebox_m300Match-

watchguardfirebox_m370Match-

watchguardfirebox_m390Match-

watchguardfirebox_m400Match-

watchguardfirebox_m440Match-

watchguardfirebox_m470Match-

watchguardfirebox_m4800Match-

watchguardfirebox_m500Match-

watchguardfirebox_m570Match-

watchguardfirebox_m5800Match-

watchguardfirebox_m590Match-

watchguardfirebox_m670Match-

watchguardfirebox_m690Match-

watchguardfirebox_t10Match-

watchguardfirebox_t10-dMatch-

watchguardfirebox_t10-wMatch-

watchguardfirebox_t15Match-

watchguardfirebox_t15-wMatch-

watchguardfirebox_t20Match-

watchguardfirebox_t20-wMatch-

watchguardfirebox_t30Match-

watchguardfirebox_t30-wMatch-

watchguardfirebox_t35Match-

watchguardfirebox_t35-rMatch-

watchguardfirebox_t35-wMatch-

watchguardfirebox_t40Match-

watchguardfirebox_t40-wMatch-

watchguardfirebox_t50Match-

watchguardfirebox_t50-wMatch-

watchguardfirebox_t55Match-

watchguardfirebox_t55-wMatch-

watchguardfirebox_t70Match-

watchguardfirebox_t80Match-

watchguardfirebox_xtm1520-rpMatch-

watchguardfirebox_xtm1525-rpMatch-

watchguardfirebox_xtm2520Match-

watchguardfirebox_xtm850Match-

watchguardfirebox_xtm860Match-

watchguardfirebox_xtm870Match-

watchguardfirebox_xtm870-fMatch-

watchguardfireboxcloudMatch-

watchguardfireboxt_nv5

watchguardfireboxt_t25

watchguardfireboxt_t45

watchguardfireboxt_t85

watchguardfireboxvMatch-

watchguardxtmvMatch-

VendorProductVersionCPE
watchguardfireware*cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
watchguardfireware12.5.12cpe:2.3:o:watchguard:fireware:12.5.12:u1:*:*:*:*:*:*
watchguardfirebox_m200-cpe:2.3:h:watchguard:firebox_m200:-:*:*:*:*:*:*:*
watchguardfirebox_m270-cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*
watchguardfirebox_m290-cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*
watchguardfirebox_m300-cpe:2.3:h:watchguard:firebox_m300:-:*:*:*:*:*:*:*
watchguardfirebox_m370-cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*
watchguardfirebox_m390-cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*
watchguardfirebox_m400-cpe:2.3:h:watchguard:firebox_m400:-:*:*:*:*:*:*:*
watchguardfirebox_m440-cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
watchguard	fireware	*	cpe:2.3:o:watchguard:fireware::::::::
watchguard	fireware	12.5.12	cpe:2.3:o:watchguard:fireware:12.5.12:u1::::::
watchguard	firebox_m200	-	cpe:2.3:h:watchguard:firebox_m200:-:::::::*
watchguard	firebox_m270	-	cpe:2.3:h:watchguard:firebox_m270:-:::::::*
watchguard	firebox_m290	-	cpe:2.3:h:watchguard:firebox_m290:-:::::::*
watchguard	firebox_m300	-	cpe:2.3:h:watchguard:firebox_m300:-:::::::*
watchguard	firebox_m370	-	cpe:2.3:h:watchguard:firebox_m370:-:::::::*
watchguard	firebox_m390	-	cpe:2.3:h:watchguard:firebox_m390:-:::::::*
watchguard	firebox_m400	-	cpe:2.3:h:watchguard:firebox_m400:-:::::::*
watchguard	firebox_m440	-	cpe:2.3:h:watchguard:firebox_m440:-:::::::*

Rows per page:

1-10 of 521

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fireware OS",
    "vendor": "WatchGuard",
    "versions": [
      {
        "lessThanOrEqual": "12.5.12+687697",
        "status": "affected",
        "version": "11.9.6",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.10.3",
        "status": "affected",
        "version": "12.6.0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011

Social References

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

Related for CVE-2024-5974