A Critical WatchGuard Fireware Flaw Could Allow Unauthenticated Code Execution

A critical out-of-bounds write vulnerability (CVE-2025-9242, CVSS 9.3) in WatchGuard Fireware’s IKEv2 VPN allows unauthenticated remote code execution on Firebox appliances. Attackers can exploit the iked process over the internet, achieving full control of affected devices. Exploitation is trivial in unpatched versions (11.10.2–11.12.4, 12.0–12.11.3, 2025.1). WatchGuard released patches (2025.1.1, 12.11.4, 12.5.13, 12.3.1_Update3). Firebox systems are frequently internet-exposed, making urgent patching essential.

📂 Network & Edge

Critical WatchGuard Fireware IKEv2 Flaw (CVE-2025-9242) Enables Unauthenticated RCE