Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 2026.4, 12.12.4, 12.5.22
- Public exploit
- None on Exploit-DB
Summary
WatchGuard Fireware OS, the operating system on WatchGuard firewalls, is affected when its Access Portal feature is enabled. A remote attacker without any login credentials could send a specially crafted request to write data beyond the bounds of a memory buffer, which could allow them to crash the device or potentially run malicious code on it.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
Affected versions
- WatchGuard Fireware OS
From 2025.1 · fixed in 2026.4; From 12.0 · fixed in 12.12.4
- WatchGuard Fireware OS
From 12.0 · fixed in 12.5.22