Firebox and Fireware OS
CVE-2025-1547: WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Fireware OS (Default) 12.0 to 12.11.3 | Upgrade past 12.11.3; see the advisory |
| Fireware OS (T15/T35) 12.0 | 12.5.13 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.
Workarounds
WatchGuard Firebox administrators should never expose management interfaces, including the command line interface, to untrusted networks. Follow WatchGuard's Firebox Remote Management Best Practices for additional guidance.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.