CVE-2022-31789: WatchGuard Fireware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Affected products

• WatchGuard Fireware: from 12.0.0, before 12.1.4 (fixed in 12.1.4); from 12.2.0, before 12.5.10 (fixed in 12.5.10); version 12.6.1 only; version 12.6.3 only; version 12.6.4 only; version 12.7.0 only; …

Published 2022-09-06. Last modified 2026-06-17.