VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 24, 2022· Updated Aug 3, 2024

CVE-2022-25291

CVE-2022-25291

Description

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • WatchGuard/Firebox and XTM appliancesdescription
  • WatchGuard/Firewarellm-fuzzy
    Range: before 12.7.2_U2, before 12.1.3_U8, before 12.5.9_U2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.