CVE-2025-14733

high-risk
Published 2025-12-19

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.

Do I need to act?

!
34.5% chance of exploitation in next 30 days
EPSS score — higher than 66% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Watchguard

References (2)

Vendor Advisory https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00027
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-...
60
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 23/34 · High
Exposure 5/34 · Minimal