Threats tagged 'ghsa-hrq5-fh6w-qjmh'

A critical code injection vulnerability exists in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling. An attacker controlling the remote VPN server can exploit this flaw to execute arbitrary commands with root privileges on the connecting Firebox device. This vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector and no required privileges or user interaction.