Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-9242 Details

Description

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py	CISA-ADP	Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242	CISA-ADP	US Government Resource
https://psirt.watchguard.com/CVE-2025-9242	WatchGuard Technologies, Inc.	Broken Link
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015	WatchGuard Technologies, Inc.	Vendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
WatchGuard Firebox Out-of-Bounds Write Vulnerability	Nov 12, 2025	Dec 3, 2025	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	WatchGuard Technologies, Inc.

Affected Products

Product	Versions
watchguard fireware	>= 11.10.2, < 12.11.4 >= 11.10.2, < 12.5.13 2025.1
CPE cpe:2.3:o:watchguard:fireware:::::::: cpe:2.3:o:watchguard:fireware:2025.1:::::::* Remediation No remediation found in references.
watchguard firebox m270	All versions
CPE cpe:2.3:h:watchguard:firebox_m270:::::::: Remediation No remediation found in references.
watchguard firebox m290	All versions
CPE cpe:2.3:h:watchguard:firebox_m290:::::::: Remediation No remediation found in references.
watchguard firebox m370	All versions
CPE cpe:2.3:h:watchguard:firebox_m370:::::::: Remediation No remediation found in references.
watchguard firebox m390	All versions
CPE cpe:2.3:h:watchguard:firebox_m390:::::::: Remediation No remediation found in references.
watchguard firebox m440	All versions
CPE cpe:2.3:h:watchguard:firebox_m440:::::::: Remediation No remediation found in references.
watchguard firebox m4600	All versions
CPE cpe:2.3:h:watchguard:firebox_m4600:::::::: Remediation No remediation found in references.
watchguard firebox m470	All versions
CPE cpe:2.3:h:watchguard:firebox_m470:::::::: Remediation No remediation found in references.
watchguard firebox m4800	All versions
CPE cpe:2.3:h:watchguard:firebox_m4800:::::::: Remediation No remediation found in references.
watchguard firebox m5600	All versions
CPE cpe:2.3:h:watchguard:firebox_m5600:::::::: Remediation No remediation found in references.
watchguard firebox m570	All versions
CPE cpe:2.3:h:watchguard:firebox_m570:::::::: Remediation No remediation found in references.
watchguard firebox m5800	All versions
CPE cpe:2.3:h:watchguard:firebox_m5800:::::::: Remediation No remediation found in references.
watchguard firebox m590	All versions
CPE cpe:2.3:h:watchguard:firebox_m590:::::::: Remediation No remediation found in references.
watchguard firebox m670	All versions
CPE cpe:2.3:h:watchguard:firebox_m670:::::::: Remediation No remediation found in references.
watchguard firebox m690	All versions
CPE cpe:2.3:h:watchguard:firebox_m690:::::::: Remediation No remediation found in references.
watchguard firebox nv5	All versions
CPE cpe:2.3:h:watchguard:firebox_nv5:::::::: Remediation No remediation found in references.
watchguard firebox t20	All versions
CPE cpe:2.3:h:watchguard:firebox_t20:::::::: Remediation No remediation found in references.
watchguard firebox t25	All versions
CPE cpe:2.3:h:watchguard:firebox_t25:::::::: Remediation No remediation found in references.
watchguard firebox t40	All versions
CPE cpe:2.3:h:watchguard:firebox_t40:::::::: Remediation No remediation found in references.
watchguard firebox t45	All versions
CPE cpe:2.3:h:watchguard:firebox_t45:::::::: Remediation No remediation found in references.
watchguard firebox t55	All versions
CPE cpe:2.3:h:watchguard:firebox_t55:::::::: Remediation No remediation found in references.
watchguard firebox t70	All versions
CPE cpe:2.3:h:watchguard:firebox_t70:::::::: Remediation No remediation found in references.
watchguard firebox t80	All versions
CPE cpe:2.3:h:watchguard:firebox_t80:::::::: Remediation No remediation found in references.
watchguard firebox t85	All versions
CPE cpe:2.3:h:watchguard:firebox_t85:::::::: Remediation No remediation found in references.
watchguard fireboxcloud	All versions
CPE cpe:2.3:h:watchguard:fireboxcloud:::::::: Remediation No remediation found in references.
watchguard fireboxv	All versions
CPE cpe:2.3:h:watchguard:fireboxv:::::::: Remediation No remediation found in references.
watchguard firebox t15	All versions
CPE cpe:2.3:h:watchguard:firebox_t15:::::::: Remediation No remediation found in references.
watchguard firebox t35	All versions
CPE cpe:2.3:h:watchguard:firebox_t35:::::::: Remediation No remediation found in references.
watchguard firebox m295	All versions
CPE cpe:2.3:h:watchguard:firebox_m295:-:::::::* Remediation No remediation found in references.
watchguard firebox m395	All versions
CPE cpe:2.3:h:watchguard:firebox_m395:-:::::::* Remediation No remediation found in references.
watchguard firebox m495	All versions
CPE cpe:2.3:h:watchguard:firebox_m495:-:::::::* Remediation No remediation found in references.
watchguard firebox m595	All versions
CPE cpe:2.3:h:watchguard:firebox_m595:-:::::::* Remediation No remediation found in references.
watchguard firebox m695	All versions
CPE cpe:2.3:h:watchguard:firebox_m695:-:::::::* Remediation No remediation found in references.
watchguard firebox t115-w	All versions
CPE cpe:2.3:h:watchguard:firebox_t115-w:::::::: Remediation No remediation found in references.
watchguard firebox t125	All versions
CPE cpe:2.3:h:watchguard:firebox_t125:::::::: Remediation No remediation found in references.
watchguard firebox t125-w	All versions
CPE cpe:2.3:h:watchguard:firebox_t125-w:::::::: Remediation No remediation found in references.
watchguard firebox t145	All versions
CPE cpe:2.3:h:watchguard:firebox_t145:::::::: Remediation No remediation found in references.
watchguard firebox t145-w	All versions
CPE cpe:2.3:h:watchguard:firebox_t145-w:::::::: Remediation No remediation found in references.
watchguard firebox t185	All versions
CPE cpe:2.3:h:watchguard:firebox_t185:::::::: Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Aug 10, 2026	Modified Analysis	[email protected]
Aug 10, 2026	CVE Modified	WatchGuard Technologies, Inc.
Jun 17, 2026	CVE Modified	WatchGuard Technologies, Inc.
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 14, 2025	CVE CISA KEV Update	Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Nov 13, 2025	Initial Analysis	[email protected]
Nov 12, 2025	CVE Modified	CISA-ADP
Oct 16, 2025	CVE Modified	CISA-ADP
Sep 17, 2025	New CVE Received	WatchGuard Technologies, Inc.

CVE-2025-9242 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE