{"cve_id":"CVE-2025-14733","published":"2025-12-19T01:16:05.530000+00:00","last_modified":"2026-09-09T04:17:52.700000+00:00","vuln_status":"Analyzed","description":"An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.\n\nIf the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","base_score":9.8,"base_severity":"CRITICAL","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-787"],"in_kev":true,"kev_date_added":"2025-12-19","kev_ransomware":true,"epss_score":0.29423,"epss_percentile":0.9818,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-07T06:48:27.714866+00:00","first_seen":"2025-12-19T01:16:05.530000+00:00","kev_first_seen":"2025-12-19T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["watchguard"],"products":["firebox_m270","firebox_m290","firebox_m295","firebox_m370","firebox_m390","firebox_m395","firebox_m440","firebox_m4600","firebox_m470","firebox_m4800","firebox_m495","firebox_m5600","firebox_m570","firebox_m5800","firebox_m590","firebox_m595","firebox_m670","firebox_m690","firebox_m695","firebox_nv5","firebox_t115-w","firebox_t125","firebox_t125-w","firebox_t145","firebox_t145-w","firebox_t15","firebox_t185","firebox_t20","firebox_t25","firebox_t35","firebox_t40","firebox_t45","firebox_t55","firebox_t70","firebox_t80","firebox_t85","fireboxcloud","fireboxv","fireware"],"affected":[{"vendor":"watchguard","product":"fireware","ranges":["≥ 11.10.2 and < 12.5.15","≥ 11.10.2 and < 12.11.6","≥ 2025.1 and < 2025.1.4"]}]}