Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2025-2902 1 CVE

WatchGuard Firebox OS (iked process): Schwachstelle ermöglicht Codeausführung

Published Dec 18, 2025 · Updated Dec 18, 2025 · de-DE

Vendor: WatchGuard Product: Firebox

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WatchGuard Firebox OS ausnutzen, um beliebigen Programmcode auszuführen.

Product

WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Vulnerabilities 1

  • Critical 9.3
    CVE-2025-14733 Exploited · Ransomware Public exploit EPSS 29%

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when co…

    WatchGuard Fireware OS
    KEV Dec 19, 2025

Revision history

  1. #1

    Initiale Fassung

References