This vulnerability (CWE-787) in WatchGuard Fireware OS occurs due to an out-of-bounds write in the wgagent process. An authenticated user with elevated privileges can exploit this flaw by crafting specific requests to the Management Web UI, potentially leading to arbitrary code execution. The issue affects versions 12.1, 12.5, and 2025.1 of Fireware OS. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not yet provided a remediation level or patch information.

Successful exploitation allows an authenticated privileged user to execute arbitrary code on the affected system, potentially compromising system integrity and availability. The vulnerability poses a high risk due to the ability to execute code with elevated privileges remotely via the Management Web UI.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Management Web UI to trusted administrators only and monitor for suspicious activity involving privileged accounts.