UpHeron
All vulnerabilities

Servers and applications

CVE-2022-25292

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

Severity
High 8.8
Published
24 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.1.3, 12.5.9, 12.7.2
Sources
NVD

Affected software

SoftwareAffected versions
WatchGuard Fireware OSServers and applications · cpe:o:watchguard:fireware
  • Version 12.7.2-u1
  • Version 12.7.2
  • From 12.7.0 before 12.7.2
  • Version 12.5.9-u1
All 15 release lines
  • From 12.0.0 before 12.1.3
  • Version 12.1.3
  • Version 12.1.3-u1
  • Version 12.1.3-u2
  • Version 12.1.3-u3
  • Version 12.1.3-u4
  • Version 12.1.3-u5
  • Version 12.1.3-u6
  • Version 12.1.3-u7
  • From 12.2.0 before 12.5.9
  • Version 12.5.9
  • Version 12.5.9-u1
  • From 12.7.0 before 12.7.2
  • Version 12.7.2
  • Version 12.7.2-u1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-25292
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-25292