Description (CNA)
An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WatchGuard / Fireware OS | affected 11.0 through 11.12.4+541730; affected 12.0 before 12.11.4; affected 2025.0 before 2025.1.1 |
| WatchGuard / Fireware OS | affected 12.0 before 12.3.1+722811 |
| WatchGuard / Fireware OS | affected 12.0 before 12.5.13 |
CWE
CWE-787
References
- https://psirt.watchguard.com/CVE-2025-9242
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015
ADP enrichment
No English description supplied.