NEW CRITICAL WATCHGUARD FIREBOX FIREWALL FLAW EXPLOITED IN ATTACKS

Summary from the TLDR InfoSec newsletter

WatchGuard is warning users to patch a critical, actively exploited remote code execution vulnerability in its Firebox firewalls. The vulnerability is caused by an out-of-bounds write that allows unauthenticated attackers to execute remote code. Firebox firewalls are only vulnerable if they are configured to use IKEv2, or in some circumstances, even if the configuration was deleted.