CVE-2026-90442

Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service

En bref

Sévérité
HIGH 8.6
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
WatchGuard
Statut NVD
Received

Description

A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.

Scores

VersionScoreVecteurÉvalué par
CVSS 4.0HIGH 8.6CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:LWatchGuard
CVSS 4.0HIGH 8.6CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · 5d1c2695-1a31-4499-88ae-e847036fd7e3 (Secondary)

Faiblesses (CWE)

Références européennes

Produits affectés

ProduitVersions
WatchGuard · Fireware OSaffected 2025.1 < 2026.4 ; affected 12.0 < 12.12.4
WatchGuard · Fireware OSaffected 12.0 < 12.5.22

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD