High 1 exploited CVE WID-SEC-2025-2071 1 CVE

WatchGuard Firebox: Schwachstelle ermöglicht Codeausführung

Published Sep 16, 2025 · Updated Nov 12, 2025 · Revision 4 · de-DE

Vendor: WatchGuard Product: Firebox

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WatchGuard Firebox ausnutzen, um beliebigen Programmcode auszuführen.

Product

WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Vulnerabilities 1

Critical 9.3

CVE-2025-9242 Exploited Public exploit EPSS 92%

WatchGuard Firebox iked Out of Bounds Write Vulnerability

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when co…

WatchGuard Fireware OS

Sep 17, 2025
KEV Nov 12, 2025

Revision history

2025-11-12 #4
Aktive Ausnutzung gemeldet
2025-10-16 #3
PoC aufgenommen
2025-09-17 #2
Referenz(en) aufgenommen: EUVD-2025-29699
2025-09-16 #1
Initiale Fassung

References

WatchGuard Security Advisory vom 2025-09-16
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015
PoC auf Watchtowr.com vom 2025-10-16
https://labs.watchtowr.com/yikes-watchguard-fireware-os-ikev2-out-of-bounds-write-cve-2025-9242/
CISA Known Exploited Vulnerabilities Catalog vom 2025-11-12
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242