CVE-2025-14733 WatchGuard Fireware OS
An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when…
- CVSS
- 9.3 Critical
- EPSS
- 29%
- Percentile
- 98
- Published
- 2025-12-19
- Force
- 11 of 12
- Public PoC
- 1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red
On CISA’s exploited list
WatchGuard Firebox Out of Bounds Write Vulnerability
- Added
- 2025-12-19
- Federal patch deadline
- 2025-12-26
- Ransomware use
- known