High · published December 5, 2025
🚨 A single misconfigured dynamic gateway could crash your Mobile User VPN! ⚡ Think of it as a traffic jam on a busy highway — if an unauthorized driver causes a major pile-up, everyone trying to get to their destination is stuck until the mess gets cleared. This vulnerability works similarly, letting attackers create a bottleneck that halts VPN services altogether. An unauthenticated attacker could exploit this memory corruption vulnerability to trigger a Denial of Service (DoS) condition, essentially shutting down your VPN connections. If you're using Fireware OS versions 12.6.1 through 12.11.4 or 2025.1 through 2025.1.2, it could leave users unable to access critical resources, leading to frustrating downtime and potential data loss.
Think of it as a traffic jam on a busy highway — if an unauthorized driver causes a major pile-up, everyone trying to get to their destination is stuck until the mess gets cleared. This vulnerability works similarly, letting attackers create a bottleneck that halts VPN services altogether. This vulnerability in WatchGuard Fireware OS allows for memory corruption in the Mobile User VPN and Branch Office VPN when using IKEv2 with misconfigured dynamic gateway peers, resulting in a Denial of Service condition.
An unauthenticated attacker could exploit this memory corruption vulnerability to trigger a Denial of Service (DoS) condition, essentially shutting down your VPN connections. If you're using Fireware OS versions 12.6.1 through 12.11.4 or 2025.1 through 2025.1.2, it could leave users unable to access critical resources, leading to frustrating downtime and potential data loss. To safeguard against this, update your Fireware OS to version 12.11.5 or 2025.1.3 immediately. Additionally, review your VPN configurations to ensure no dynamic gateway peers are left unmonitored. Don't forget to monitor your systems for any unusual activity! You've got this! With these updates and checks, you'll have your network back in top shape in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| watchguard/fireware | ≥ 2025.1, < 2025.1.3 | 2025.1.3 |
| watchguard/fireware | ≥ 12.0.0, < 12.11.5 | 12.11.5 |