The United States On Wednesday, the Cybersecurity and Infrastructure Security Agency (CISA) included a critical security vulnerability affecting WatchGuard Fireware in its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability being referred to is CVE-2025-9242 (CVSS score: 9.3), which is an out-of-bounds write vulnerability that impacts Fireware OS versions 11.10.2 through 11.12.4_Update1, 12.0 through 12.11.3, and 2025.1.
CISA reported in an advisory that the OS iked process of WatchGuard Firebox has an out-of-bounds write vulnerability, which could enable a remote attacker without authentication to run arbitrary code.
Last month, watchTowr Labs disclosed specifics regarding the vulnerability, with the cybersecurity firm indicating that it arises from a lack of length verification on an identification buffer utilized in the IKE handshake process read more about CISA Flags Critical WatchGuard Fireware Flaw Exposing 54000 Fireboxes to No-Login Attacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.