CyberSec.Space Logo
返回 CVE 浏览器

CVE-2025-14733

🔥 Known Exploited (CISA KEV)CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-12-19
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.

Affected Platforms (CPE)

💻
Watchguard

Fireware

>= 11.10.2 and < 12.5.15>= 11.10.2 and < 12.11.6>= 2025.1 and < 2025.1.4

References & Advisories

🔗 https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00027
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14733

相关漏洞威胁

CVE-2026-8247

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network seg...

CVE-2026-137284.4

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentia...

CVE-2026-13722

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An aut...

CVE-2026-133847.2

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to exe...