Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 2026.4, 12.12.4
- Public exploit
- None on Exploit-DB
Summary
Fireware OS, the operating system used on WatchGuard Firebox network security appliances, is affected by this flaw in its WireGuard configuration handling. A remote attacker positioned to intercept and decrypt TLS traffic between the Firebox and WatchGuard Cloud could trigger a denial of service or potentially run arbitrary code on the device.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.
Affected versions
- WatchGuard Fireware OS
From 2026.2 · fixed in 2026.4; From 12.12 · fixed in 12.12.4