Out-of-bounds Write Vulnerability in WatchGuard Fireware OS for VPN Solutions

CVE-2025-9242

What is CVE-2025-9242?

A serious Out-of-bounds Write vulnerability in WatchGuard Fireware OS can be exploited by a remote unauthenticated attacker, potentially enabling the execution of arbitrary code. This flaw impacts various Virtual Private Network (VPN) services, including the Mobile User VPN and Branch Office VPN, especially when configured with a dynamic gateway peer. Systems running Fireware OS versions 11.10.2 to 11.12.4_Update1, 12.0 to 12.11.3, and 2025.1 are particularly vulnerable, highlighting the importance of prompt patching and system updates to mitigate risks.

References