WATCHGUARD WARNS OF CRITICAL VULNERABILITY IN FIREBOX FIREWALLS

Summary from the TLDR InfoSec newsletter

WatchGuard has released security updates to address a critical (CVSS 9.3) remote code execution vulnerability impacting its Firebox firewalls. The vulnerability is caused by an out-of-bounds write on devices configured to use IKEv2 VPN. Devices that have deleted the vulnerable configuration but still have a branch office VPN to a static gateway peer configured may also be vulnerable.