High · published December 5, 2025
⚡ An authenticated user can exploit this out-of-bounds write vulnerability in WatchGuard Fireware OS, opening the door for arbitrary code execution! 🚨 Think of it like a restaurant where a trusted employee can access the kitchen but has a secret recipe book that lets them add their own ingredients to the dishes — a recipe that could result in something quite dangerous! An attacker with privileged access could potentially craft malicious IPSec configuration commands that lead to code execution, putting your network security at risk. This means they could change settings or even take control of your Fireware OS environment, a nightmare scenario for any security-conscious organization!
Think of it like a restaurant where a trusted employee can access the kitchen but has a secret recipe book that lets them add their own ingredients to the dishes — a recipe that could result in something quite dangerous! The vulnerability arises from improper handling of IPSec configuration CLI commands within Fireware OS, allowing an authenticated user to manipulate memory outside of the allocated bounds, leading to arbitrary code execution.
An attacker with privileged access could potentially craft malicious IPSec configuration commands that lead to code execution, putting your network security at risk. This means they could change settings or even take control of your Fireware OS environment, a nightmare scenario for any security-conscious organization! Immediately patch your systems to versions beyond Fireware OS 11.12.4+541730, 12.11.4, 12.5.13, or 2025.1.2. Additionally, review user permissions to ensure that only trusted individuals have administrative access to the CLI. Regularly monitor logs for suspicious activities! You’ve got this! Follow these steps to secure your system, and keep that network safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| watchguard/fireware | ≥ 11.0, < 12.5.14 | 12.5.14 |
| watchguard/fireware | ≥ 11.0, < 12.11.5 | 12.11.5 |
| watchguard/fireware | ≥ 2025.1, < 2025.1.3 | 2025.1.3 |