CVE-2013-6021: WatchGuard Fireware

High severity, CVSS 9.3. EPSS: 11.7% chance of exploitation in the next 30 days.

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

Affected products

• WatchGuard Fireware: up to and including 11.7.4; version 11.0.2 only; version 11.1 only; version 11.2.3 only; version 11.3 only; version 11.3.6 only; …

Published 2013-10-19. Last modified 2026-06-16.