CVE-2025-14733

Published Dec 19, 2025

Last updated a month ago

WatchGuard Fireware OS

Firmware

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-14733 is a zero-day vulnerability affecting WatchGuard Firebox firewall appliances. It is an out-of-bounds write flaw in the `iked` process, which handles IKEv2 VPN negotiations. This vulnerability allows remote, unauthenticated attackers to execute arbitrary code and seize control of affected devices. The vulnerability impacts Firebox appliances configured for Mobile User VPNs using IKEv2 or Branch Office VPNs using IKEv2 with a dynamic gateway peer. By sending a specially crafted request to the firewall, an attacker can trigger a memory corruption error, leading to arbitrary code execution. Even if a vulnerable VPN configuration was previously deleted, the device may still be at risk if a static branch office VPN remains configured.

Description: An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.
Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3
NVD status: Analyzed
Products: fireware

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: WatchGuard Firebox Out of Bounds Write Vulnerability
Exploit added on: Dec 19, 2025
Exploit action due: Dec 26, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C506DA98-651D-4EA6-BEAE-4E5E69841E0F",
            "versionEndExcluding": "12.5.15",
            "versionStartIncluding": "11.10.2",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "CC78E84B-C17B-44C5-9427-5EF97B90A6EF",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "12FED793-9DF3-46BB-AA64-3B1934123616",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9C81D87D-AB69-48F3-B780-1DB762865AB5",
            "versionEndExcluding": "12.11.6",
            "versionStartIncluding": "11.10.2",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB00A42A-2065-4914-80CA-981E62DEC2CC",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "22AC145E-2F33-4C0D-AA78-080CEA1980AB",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "80F83640-57E7-4DF8-A201-E8D5722EF978",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "2F639188-7E3D-46B8-8443-5B1F32A3EC59",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BB643AE5-6432-474F-BCF9-7A92B907EDE1",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "08FC5CE7-00F5-40C4-877F-78D3DF6B01DC",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "04B14406-F7EC-4573-8AF0-BCCBA9BD1A15",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4D10EFE3-0342-4670-AC73-011D08A4CBEA",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "68953F7A-9037-4848-9F7B-FD8E798CB761",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "413CB88D-9755-43BF-9D76-4252C7151A84",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "902C261B-AE76-4F2A-B660-2C069692E95D",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F3781D2E-80EF-4F6C-BBC3-7570940A5EBF",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1D5FBFA4-219F-49F8-BD2C-415A621F6ED6",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "157A59B2-F420-4203-92C4-412685C51893",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "FFD1036B-87F5-4523-B67C-0DE6E9AACE32",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8050A99B-C106-422D-9497-5E7C79FB89E0",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7F2A1048-7830-4CEB-B6D1-4A4F0C10580F",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F97AE5A0-E6E5-46BD-B05D-98E4253773F7",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BD55ABF8-7C3C-476C-9A04-C889F3D8A21E",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9882123D-992F-4BDA-8EE0-433A3AF62B54",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4D86B0B2-D05B-4361-A02A-C1FEE2F710DD",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D89FF95E-552C-4264-94F9-F7D50FE002FA",
            "versionEndExcluding": "2025.1.4",
            "versionStartIncluding": "2025.1",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "615FF2CF-69DA-4890-9236-52D8D6FA0E71",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A3439409-2FD6-447B-91CF-17D1C09E2A79",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "C0C0412F-AB02-4D13-B159-D0FCD2ECA3ED",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "575CC5EE-0278-489B-AA95-5EC5058D6FB9",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "5597F672-3C72-4BCF-AD3F-F16B6913EC2F",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "E28F563C-BC6E-41FB-8C62-F56CC539D4DD",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "2296AE00-4806-484D-BD1D-B58A8FB87CE0",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F9071315-92A1-45FA-A048-BB750A40EF76",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9A435F5A-752F-44D7-8083-0C2670F26689",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "591A04F9-FF92-4484-91DC-F268805A8708",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "49672197-C3FA-42A5-A550-DCA5ED89D0FA",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.