critical9.8Known exploited
CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-11-12. Federal due date: 2025-12-03.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Fireware | from 11.10.2 before 12.11.4 from 11.10.2 before 12.5.13 Version 2025.1 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://psirt.watchguard.com/CVE-2025-9242
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015
- https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242