Critical · published September 17, 2025
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.
🚨 An unauthenticated attacker can exploit an out-of-bounds write vulnerability in WatchGuard Fireware OS! This could lead to arbitrary code execution and wreak havoc. 🔥 Think of it like a mischievous kid sneaking into a classroom and rearranging the entire seating plan without permission — total chaos ensues and no one is safe from the consequences! If exploited, an attacker could gain full control over the device, leading to potential data breaches, unauthorized access, and a complete compromise of your network's integrity. This is absolutely devastating!
Think of it like a mischievous kid sneaking into a classroom and rearranging the entire seating plan without permission — total chaos ensues and no one is safe from the consequences! This vulnerability exists due to improper handling of memory bounds in WatchGuard Fireware OS, allowing attackers to write outside the allocated memory space and execute arbitrary code.
If exploited, an attacker could gain full control over the device, leading to potential data breaches, unauthorized access, and a complete compromise of your network's integrity. This is absolutely devastating! Patch your Fireware OS immediately to version 12.12 or later. Ensure that you configure your VPN with proper authentication measures to mitigate this risk. Regularly audit your network settings to prevent unauthorized access. You've got this! With prompt action, you'll keep your network secure and earn your Security Hero badge! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| watchguard/fireware | ≥ 11.10.2, < 12.11.4 | 12.11.4 |
| watchguard/fireware | ≥ 11.10.2, < 12.5.13 | 12.5.13 |
| watchguard/fireware | all versions | — |