UpHeron
All vulnerabilities

Servers and applications

CVE-2022-31789

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Severity
Critical 9.8
Published
6 Sept 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.1.4, 12.5.10
Sources
NVD

Affected software

SoftwareAffected versions
WatchGuard Fireware OSServers and applications · cpe:o:watchguard:fireware
  • Version 12.8.0-u1
  • Version 12.7.2-u2
  • Version 12.7.1
  • Version 12.7.0-u1
All 10 release lines
  • From 12.0.0 before 12.1.4
  • From 12.2.0 before 12.5.10
  • Version 12.6.1-u1
  • Version 12.6.1-u3
  • Version 12.6.3
  • Version 12.6.4
  • Version 12.7.0-u1
  • Version 12.7.1
  • Version 12.7.2-u2
  • Version 12.8.0-u1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31789
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31789