CVE-2024-5974
Published: 09 July 2024
Summary
CVE-2024-5974 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Watchguard Fireware. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 8.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A buffer overflow vulnerability exists in WatchGuard Fireware OS, tracked as CVE-2024-5974 under CWE-120. The flaw affects versions 11.9.6 through 12.10.3 and received a CVSS 3.1 score of 7.2 reflecting network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.
An authenticated remote attacker with privileged management access can exploit the condition to execute arbitrary code with full system privileges on the firewall. No unauthenticated or low-privileged vectors are indicated.
WatchGuard published advisory WGSA-2024-00011 at https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011. The EPSS score has remained flat at 0.0634 with no material rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-47161
Vulnerability details
A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Platform-independent managed code eliminates the need for unchecked native buffer copies that are the root cause of classic buffer overflows.