Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
At a glance
Severity
CRITICAL 9.2
State
PUBLISHED
Published
Updated
Assigner
WatchGuard
NVD status
Received
Description
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
