Vulnerability · Published Dec 4, 2025 · Assigned by WatchGuard
CVE-2025-1547WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
High 7.5
In plain English
A high-severity stack buffer overflow in Fireware OS from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 4.0)7.5High
Exploit odds (30 days)0.4%top 68.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Fireware OS | 12.0 – through 12.11.3 |
| WatchGuard | Fireware OS | 12.0 – before 12.5.13 |
Weakness: CWE-121 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://psirt.watchguard.com/CVE-2025-1547 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00013 vendor-advisory