Description
WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Fireware OS | WatchGuard / Fireware OS | >= 11.10.2, <= 11.12.4+541730 | affected |
| Fireware OS | WatchGuard / Fireware OS | >= 12.0, < 12.11.6 | affected |
| Fireware OS | WatchGuard / Fireware OS | >= 12.0, < 12.3.1+728352 | affected |
| Fireware OS | WatchGuard / Fireware OS | >= 12.0, < 12.5.15 | affected |
| Fireware OS | WatchGuard / Fireware OS | >= 2025.1, < 2025.1.4 | affected |