PT-2026-102945 · Watchguard · Fireware Os
CVSS v4.0
7.5
High
| Vector | AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
WatchGuard Fireware OS (affected versions not specified)
Description
An issue exists in the SAML single sign-on session handling (samld) where untrusted data is deserialized. An attacker who has already obtained the ability to write files on the appliance can execute arbitrary code within the context of the
samld service by inducing the service to load a maliciously crafted session file. Deserialization is the process of converting a data format, such as a file or network stream, back into an object that can be used by a program.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Fireware Os