Vulnerabilities CVE-2025-14733

CVE-2025-14733

Critical

Open

KEV

TLP:CLEAR

WatchGuard Firebox iked Out of Bounds Write Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

Details

CVSS Score: 9.3
EPSS Score ⓘ: 26.18%

97.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red
Confidence: 100%
Published: Dec 19, 2025
Last Modified: Aug 10, 2026
CISA KEV
Date Added: Dec 19, 2025
Patch Due: Dec 26, 2025
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.