Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
En bref
Sévérité
CRITICAL 9.2
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
WatchGuard
Statut NVD
Received
Description
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.