WatchGuard AI Security Research

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service

Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks