ZDI-CAN-30097: ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability, but only systems using VPN with IKEv2 are vulnerable. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2026-13084.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WatchGuard FireWare OS (ike/ike2_hmac)to a version that resolves this vulnerability.Patch ZDI-26-427
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-30097?
The vulnerability ZDI-CAN-30097 has a CVSS rating of 5.9, indicating a moderate severity level.
How do I fix ZDI-CAN-30097?
To remediate ZDI-CAN-30097, update your WatchGuard FireWare OS to the latest version provided by the vendor.
What systems are affected by ZDI-CAN-30097?
ZDI-CAN-30097 affects installations of WatchGuard FireWare OS that are using VPN with IKEv2.
Can ZDI-CAN-30097 be exploited without authentication?
Yes, ZDI-CAN-30097 can be exploited remotely without authentication.
What kind of attack does ZDI-CAN-30097 facilitate?
ZDI-CAN-30097 allows attackers to create a denial-of-service condition on vulnerable systems.