This vulnerability (CWE-489) in WatchGuard Fireware OS 12.0 involves the presence of a leftover diagnostic command that can be exploited by an authenticated admin user who has access to both the WebUI and CLI. By uploading a diagnostic package specific to the platform and version, the attacker can enable a debug shell, potentially exposing sensitive system functions or data. The CVSS 4.0 base score is 8.9, reflecting high impact and exploitability under the conditions of authenticated high-privilege access.

An attacker with authenticated administrator privileges can enable a diagnostic debug shell on the Firebox device, which may lead to unauthorized system control or information disclosure. The vulnerability requires high privileges and user interaction but could significantly compromise the device's security if exploited.

No official patch or fix is currently documented for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only and monitor for any unusual diagnostic package uploads or command executions.