CVE-2025-1547

WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command

HIGH

7.2

CVSS Score

Published: December 4, 2025 at 10:11 PM UTC

Updated: September 25, 2026 at 11:27 PM UTC

28 products affected across 1 vendorFirewareFirebox M4800Firebox T55

Using Fireware OS by WatchGuard?

Get instant alerts when new vulnerabilities affect Fireware OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fireware · WatchGuard

95%

12.0 ≤ v ≤ 12.11.312.0 ≤ v < 12.5.1312.0.0 ≤ v < 12.11.312.5 ≤ v < 12.5.1312.0

Affected range stops below 12.11.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.5.13, so it looks safe — our inference, not a vendor statement

watchguard-firebox-m270 (environment) · watchguard-firebox-m290 (environment) · watchguard-firebox-m370 (environment) · watchguard-firebox-m390 (environment) · watchguard-firebox-m440 (environment) · watchguard-firebox-m4600 (environment) · watchguard-firebox-m470 (environment) · watchguard-firebox-m4800 (environment) · watchguard-firebox-m5600 (environment) · watchguard-firebox-m570 (environment) · watchguard-firebox-m5800 (environment) · watchguard-firebox-m590 (environment) · watchguard-firebox-m670 (environment) · watchguard-firebox-m690 (environment) · watchguard-firebox-nv5 (environment) · watchguard-firebox-t15 (environment) · watchguard-firebox-t20 (environment) · watchguard-firebox-t25 (environment) · watchguard-firebox-t35 (environment) · watchguard-firebox-t40 (environment) · watchguard-firebox-t45 (environment) · watchguard-firebox-t55 (environment) · watchguard-firebox-t70 (environment) · watchguard-firebox-t80 (environment) · watchguard-firebox-t85 (environment) · watchguard-fireboxcloud (environment) · watchguard-fireboxv (environment)

Firebox M270 · WatchGuarddevice

80%

All versions

Firebox M290 · WatchGuarddevice

80%

All versions

Firebox M370 · WatchGuarddevice

80%

All versions

Firebox M390 · WatchGuarddevice

80%

All versions