CVE-2025-14733: WatchGuard Firebox Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.
Other sources
WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
WatchGuard Fireware OSfrom your environment.Discontinue use of the product if mitigations are unavailable.
- Compensating control
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14733?
The severity of CVE-2025-14733 is high, as it allows remote unauthenticated attackers to execute arbitrary code.
How do I fix CVE-2025-14733?
To fix CVE-2025-14733, update your WatchGuard Fireware OS to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-14733?
CVE-2025-14733 affects WatchGuard Fireware OS versions between 11.10.2 and 11.12.4_Update1, 12.0 and 12.11.5, and 2025.1 and 2025.1.3.
Can CVE-2025-14733 be exploited remotely?
Yes, CVE-2025-14733 can be exploited remotely without authentication, making it critical to address immediately.
What impact does CVE-2025-14733 have on network security?
CVE-2025-14733 poses a significant risk to network security by allowing unauthorized code execution on affected devices.