An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
13 Nov 2025, 15:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 - Vendor Advisory | |
| References | () https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py - Exploit | |
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 - US Government Resource | |
| CPE | cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:2025.1:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:* |
|
| First Time |
Watchguard firebox T145-w
Watchguard firebox T35 Watchguard firebox M590 Watchguard firebox M670 Watchguard firebox T80 Watchguard firebox T145 Watchguard firebox T25 Watchguard firebox M4600 Watchguard firebox T85 Watchguard firebox M370 Watchguard firebox M5600 Watchguard firebox T55 Watchguard fireboxv Watchguard firebox T20 Watchguard firebox T70 Watchguard firebox M570 Watchguard firebox M470 Watchguard firebox Nv5 Watchguard firebox M4800 Watchguard firebox M270 Watchguard Watchguard firebox T15 Watchguard fireware Watchguard firebox M690 Watchguard firebox T185 Watchguard firebox T125 Watchguard firebox M440 Watchguard firebox T45 Watchguard firebox M290 Watchguard firebox M5800 Watchguard firebox T115-w Watchguard fireboxcloud Watchguard firebox T40 Watchguard firebox M390 Watchguard firebox T125-w |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
12 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Oct 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Sep 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-17 08:15
Updated : 2025-11-14 02:00
NVD link : CVE-2025-9242
Mitre link : CVE-2025-9242
CVE.ORG link : CVE-2025-9242
JSON object : View
Products Affected
watchguard
- firebox_m4600
- firebox_m470
- firebox_t185
- firebox_t40
- firebox_t70
- firebox_m670
- fireboxcloud
- firebox_t80
- firebox_nv5
- firebox_m5800
- firebox_t125
- firebox_t115-w
- firebox_m5600
- firebox_t45
- firebox_m440
- firebox_t125-w
- firebox_t55
- firebox_m570
- firebox_t15
- firebox_m370
- firebox_m690
- firebox_m590
- firebox_t20
- firebox_t25
- firebox_m270
- firebox_m4800
- fireboxv
- firebox_t145-w
- firebox_t35
- firebox_m390
- firebox_m290
- firebox_t85
- firebox_t145
- fireware
CWE
CWE-787
Out-of-bounds Write