CVE-2025-1547

EUVD-2025-201291
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 28.11%
Affected Products (NVD)
VendorProductVersion
watchguardfireware
12.0.0 ≤
𝑥
< 12.11.3
watchguardfireware
12.5 ≤
𝑥
< 12.5.13
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psirt.watchguard.com/CVE-2025-1547
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00013