Warning: Arbitrary Code Execution in WatchGuard Fireware OS, Patch Immediately!
ID: d089b1c5-8b08-59f8-ad8c-5d77e2fd39ed
STIX ID: report--d089b1c5-8b08-59f8-ad8c-5d77e2fd39ed
Threat Score
A critical remote unauthenticated code execution vulnerability (CVE-2025-14733, CVSS 9.3) was discovered in WatchGuard Fireware OS's iked process affecting multiple versions; attackers can trigger out-of-bounds writes by sending oversized IKE_AUTH CERT payloads (>2000 bytes). WatchGuard reports active exploitation in the wild, has published patches and IoCs, and organisations are advised to apply updates urgently and increase monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.