CVE-2022-31749

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions prior to 12.1.4 WatchGuard Fireware OS versions prior to 12.5.10 WatchGuard Fireware OS versions prior to 12.8.1

Description An argument injection issue in the diagnose and import pac commands allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM appliances.

Recommendations WatchGuard Fireware OS version prior to 12.1.4: Update to version 12.1.4 or later. WatchGuard Fireware OS version prior to 12.5.10: Update to version 12.5.10 or later. WatchGuard Fireware OS version prior to 12.8.1: Update to version 12.8.1 or later.