CVE-2025-9242 (GCVE-0-2025-9242)

Vulnerability from cvelistv5 – Published: 2025-09-17 07:29 – Updated: 2025-11-14 22:30
VLAI? CISA
Summary
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
Severity ?
9.3 (Critical)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE
Assigner
References
Impacted products
Vendor Product Version
WatchGuard Fireware OS Affected: 12.0 , ≤ 12.11.3 (semver)
Affected: 11.10.2 , ≤ 11.12.4+541730 (semver)
Affected: 2025.0 , ≤ 2025.1 (semver)
Create a notification for this product.
Credits
btaol
CISA Known Exploited Vulnerability
Data from the CISA Known Exploited Vulnerabilities Catalog

Date added: 2025-11-12

Due date: 2025-12-03

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Used in ransomware: Unknown

Notes: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 ; https://nvd.nist.gov/vuln/detail/CVE-2025-9242

Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-9242",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-11T04:55:33.935049Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-11-12",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-12T17:20:25.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-11-12T00:00:00+00:00",
            "value": "CVE-2025-9242 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThanOrEqual": "12.11.3",
              "status": "affected",
              "version": "12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "11.12.4+541730",
              "status": "affected",
              "version": "11.10.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "2025.1",
              "status": "affected",
              "version": "2025.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.0",
                  "versionEndIncluding": "12.11.3",
                  "versionStartIncluding": "12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:11.10.2",
                  "versionEndIncluding": "11.12.4+541730",
                  "versionStartIncluding": "11.10.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:2025.0",
                  "versionEndIncluding": "2025.1",
                  "versionStartIncluding": "2025.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "btaol"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.\u003cp\u003eThis vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.\u003c/p\u003e"
            }
          ],
          "value": "An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-253",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-253 Remote Code Inclusion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-14T22:30:31.226Z",
        "orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "shortName": "WatchGuard"
      },
      "references": [
        {
          "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015"
        }
      ],
      "source": {
        "advisory": "WGSA-2025-00015",
        "defect": [
          "FBX-30275"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "WatchGuard Firebox iked Out of Bounds Write Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
    "assignerShortName": "WatchGuard",
    "cveId": "CVE-2025-9242",
    "datePublished": "2025-09-17T07:29:23.738Z",
    "dateReserved": "2025-08-20T11:08:20.724Z",
    "dateUpdated": "2025-11-14T22:30:31.226Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2025-9242",
      "cwes": "[\"CWE-787\"]",
      "dateAdded": "2025-11-12",
      "dueDate": "2025-12-03",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 ; https://nvd.nist.gov/vuln/detail/CVE-2025-9242",
      "product": "Firebox",
      "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.",
      "vendorProject": "WatchGuard",
      "vulnerabilityName": "WatchGuard Firebox Out-of-Bounds Write Vulnerability"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-9242\",\"sourceIdentifier\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"published\":\"2025-09-17T08:15:33.960\",\"lastModified\":\"2025-11-14T02:00:02.350\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"cisaExploitAdd\":\"2025-11-12\",\"cisaActionDue\":\"2025-12-03\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"WatchGuard Firebox Out-of-Bounds Write Vulnerability\",\"weaknesses\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.10.2\",\"versionEndExcluding\":\"12.11.4\",\"matchCriteriaId\":\"58DBE3BF-F432-4724-B76B-2FAF4BDB72C0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB00A42A-2065-4914-80CA-981E62DEC2CC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22AC145E-2F33-4C0D-AA78-080CEA1980AB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F83640-57E7-4DF8-A201-E8D5722EF978\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F639188-7E3D-46B8-8443-5B1F32A3EC59\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB643AE5-6432-474F-BCF9-7A92B907EDE1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08FC5CE7-00F5-40C4-877F-78D3DF6B01DC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04B14406-F7EC-4573-8AF0-BCCBA9BD1A15\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D10EFE3-0342-4670-AC73-011D08A4CBEA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68953F7A-9037-4848-9F7B-FD8E798CB761\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"413CB88D-9755-43BF-9D76-4252C7151A84\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"902C261B-AE76-4F2A-B660-2C069692E95D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3781D2E-80EF-4F6C-BBC3-7570940A5EBF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D5FBFA4-219F-49F8-BD2C-415A621F6ED6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"157A59B2-F420-4203-92C4-412685C51893\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFD1036B-87F5-4523-B67C-0DE6E9AACE32\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8050A99B-C106-422D-9497-5E7C79FB89E0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F2A1048-7830-4CEB-B6D1-4A4F0C10580F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F97AE5A0-E6E5-46BD-B05D-98E4253773F7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD55ABF8-7C3C-476C-9A04-C889F3D8A21E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9882123D-992F-4BDA-8EE0-433A3AF62B54\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D86B0B2-D05B-4361-A02A-C1FEE2F710DD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.10.2\",\"versionEndExcluding\":\"12.5.13\",\"matchCriteriaId\":\"E18330D2-E06A-4C5C-94A0-62F2F683E015\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC78E84B-C17B-44C5-9427-5EF97B90A6EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12FED793-9DF3-46BB-AA64-3B1934123616\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:2025.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3FF092A-6FCD-43AA-BF50-4695B1514988\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E28F563C-BC6E-41FB-8C62-F56CC539D4DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2296AE00-4806-484D-BD1D-B58A8FB87CE0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9071315-92A1-45FA-A048-BB750A40EF76\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A435F5A-752F-44D7-8083-0C2670F26689\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"591A04F9-FF92-4484-91DC-F268805A8708\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49672197-C3FA-42A5-A550-DCA5ED89D0FA\"}]}]}],\"references\":[{\"url\":\"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015\",\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-9242\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-11-11T04:55:33.935049Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2025-11-12\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242\"}}}], \"references\": [{\"url\": \"https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py\", \"tags\": [\"exploit\"]}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-09-17T12:57:15.519Z\"}, \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-11-12T00:00:00+00:00\", \"value\": \"CVE-2025-9242 added to CISA KEV\"}]}], \"cna\": {\"title\": \"WatchGuard Firebox iked Out of Bounds Write Vulnerability\", \"source\": {\"defect\": [\"FBX-30275\"], \"advisory\": \"WGSA-2025-00015\", \"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"btaol\"}], \"impacts\": [{\"capecId\": \"CAPEC-253\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-253 Remote Code Inclusion\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 9.3, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"WatchGuard\", \"product\": \"Fireware OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"12.11.3\"}, {\"status\": \"affected\", \"version\": \"11.10.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"11.12.4+541730\"}, {\"status\": \"affected\", \"version\": \"2025.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"2025.1\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.\u003cp\u003eThis vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.0\", \"vulnerable\": true, \"versionEndIncluding\": \"12.11.3\", \"versionStartIncluding\": \"12.0\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:11.10.2\", \"vulnerable\": true, \"versionEndIncluding\": \"11.12.4+541730\", \"versionStartIncluding\": \"11.10.2\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:2025.0\", \"vulnerable\": true, \"versionEndIncluding\": \"2025.1\", \"versionStartIncluding\": \"2025.0\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"shortName\": \"WatchGuard\", \"dateUpdated\": \"2025-11-14T22:30:31.226Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-9242\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-14T22:30:31.226Z\", \"dateReserved\": \"2025-08-20T11:08:20.724Z\", \"assignerOrgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"datePublished\": \"2025-09-17T07:29:23.738Z\", \"assignerShortName\": \"WatchGuard\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.