WatchGuard Fireware OS Flaw: Over 71,000 Devices at Risk of Remote Code Chaos!
WatchGuard Fireware OS users, beware! A critical vulnerability named CVE-2025-9242 could let cyber villains remotely execute code. Affecting mobile user VPN and BOVPN with IKEv2, this flaw has a CVSS score of 9.3. Over 71,000 devices might be vulnerable, so stay vigilant and consider WatchGuard’s temporary workaround if you can’t upgrade yet.
Hot Take:
WatchGuard’s Fireware OS is on fire, but not in the good way. With a vulnerability that’s as exposed as a nudist on a beach, it’s time to put on some digital sunscreen and protect those virtual assets. When your firewall starts letting in more than it keeps out, it’s time to call the fire department—or in this case, the IT department! Who knew firewalls could be this hot?
Key Points:
- A critical vulnerability (CVSS4.0 9.3) in WatchGuard Fireware OS could allow remote code execution.
- The bug affects mobile user VPN with IKEv2 and branch office VPN (BOVPN) configured with a dynamic gateway peer.
- The vulnerability impacts versions of Fireware OS from 11.10.2 up to 12.11.3 and 2025.1.
- Potentially over 71,000 devices are vulnerable, according to Shadowserver’s IP data scans.
- WatchGuard provides workaround recommendations for those unable to upgrade their Fireware OS immediately.
Already a member? Log in here