CVE-2025-14733

Critical

Published: 19/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer. It affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5, and 2025.1 up to and including 2025.1.3.

Risk Assessment

Risk of unauthenticated remote code execution, potentially leading to full control of the firewall device and compromise of the entire network.

Recommendation

Immediately update Fireware OS to a patched version and review VPN configurations for unnecessary dynamic peers.

Original NVD description (English source)

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.