CVE-2025-9242

Published Sep 17, 2025

Last updated 23 days ago

WatchGuard Fireware OS

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-9242 is an out-of-bounds write vulnerability found in WatchGuard Fireware OS. The vulnerability resides in the *iked* process. This flaw makes it possible for an unauthenticated, remote attacker to execute arbitrary code on affected systems. The vulnerability impacts both Mobile User VPN with IKEv2 and Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

Description: An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
Source: 5d1c2695-1a31-4499-88ae-e847036fd7e3
NVD status: Analyzed
Products: fireware

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: WatchGuard Firebox Out-of-Bounds Write Vulnerability
Exploit added on: Nov 12, 2025
Exploit action due: Dec 3, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-787

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 12

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "58DBE3BF-F432-4724-B76B-2FAF4BDB72C0",
            "versionEndExcluding": "12.11.4",
            "versionStartIncluding": "11.10.2"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DB00A42A-2065-4914-80CA-981E62DEC2CC"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "22AC145E-2F33-4C0D-AA78-080CEA1980AB"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "80F83640-57E7-4DF8-A201-E8D5722EF978"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2F639188-7E3D-46B8-8443-5B1F32A3EC59"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "BB643AE5-6432-474F-BCF9-7A92B907EDE1"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "08FC5CE7-00F5-40C4-877F-78D3DF6B01DC"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "04B14406-F7EC-4573-8AF0-BCCBA9BD1A15"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4D10EFE3-0342-4670-AC73-011D08A4CBEA"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "68953F7A-9037-4848-9F7B-FD8E798CB761"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "413CB88D-9755-43BF-9D76-4252C7151A84"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "902C261B-AE76-4F2A-B660-2C069692E95D"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F3781D2E-80EF-4F6C-BBC3-7570940A5EBF"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1D5FBFA4-219F-49F8-BD2C-415A621F6ED6"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "157A59B2-F420-4203-92C4-412685C51893"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FFD1036B-87F5-4523-B67C-0DE6E9AACE32"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "8050A99B-C106-422D-9497-5E7C79FB89E0"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7F2A1048-7830-4CEB-B6D1-4A4F0C10580F"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F97AE5A0-E6E5-46BD-B05D-98E4253773F7"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "BD55ABF8-7C3C-476C-9A04-C889F3D8A21E"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9882123D-992F-4BDA-8EE0-433A3AF62B54"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4D86B0B2-D05B-4361-A02A-C1FEE2F710DD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E18330D2-E06A-4C5C-94A0-62F2F683E015",
            "versionEndExcluding": "12.5.13",
            "versionStartIncluding": "11.10.2"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CC78E84B-C17B-44C5-9427-5EF97B90A6EF"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "12FED793-9DF3-46BB-AA64-3B1934123616"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:watchguard:fireware:2025.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B3FF092A-6FCD-43AA-BF50-4695B1514988"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E28F563C-BC6E-41FB-8C62-F56CC539D4DD"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2296AE00-4806-484D-BD1D-B58A8FB87CE0"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F9071315-92A1-45FA-A048-BB750A40EF76"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A435F5A-752F-44D7-8083-0C2670F26689"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "591A04F9-FF92-4484-91DC-F268805A8708"
          },
          {
            "criteria": "cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "49672197-C3FA-42A5-A550-DCA5ED89D0FA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.