What is the CVSS score of CVE-2026-3342?

CVE-2026-3342 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Fireware are affected by CVE-2026-3342?

A high-severity vulnerability in WatchGuard Fireware OS allows authenticated administrators with privileged access to execute arbitrary code with root permissions through an exposed management…

How to fix or mitigate CVE-2026-3342?

Within 24 hours: Inventory all WatchGuard Fireware deployments and document current versions; restrict administrative access to the management interface through network segmentation and IP whitelisting. Within 7 days: Implement enhanced logging and monitoring on all management interface access; conduct a review of recent administrator activities for signs of exploitation. Within 30 days: Monitor WatchGuard security advisories for patch availability; develop and test a firmware upgrade plan; consider temporary deployment of additional network monitoring solutions to compensate for firewall vulnerability.

Fireware CVE-2026-3342

HIGH

Out-of-bounds Write (CWE-787)

2026-03-03 5d1c2695-1a31-4499-88ae-e847036fd7e3

RCE Buffer Overflow Fireware Watchguard

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 14:15 nvd

HIGH 7.2

DescriptionCVE.org

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.

This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

AnalysisAI

WatchGuard Fireware OS contains an out-of-bounds write vulnerability in its management interface that permits authenticated administrators to achieve root-level code execution. The flaw affects versions 11.9 through 11.12.4_Update1, 12.0 through 12.11.7, and 2025.1 through 2026.1.1, with no patch currently available. While exploitation requires high-level administrative privileges, successful attacks grant complete system compromise.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). Affects the an exposed management component of Fireware. An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface.

This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.