CVE-2025-9242

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-9242
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 Vendor Advisory
https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:watchguard:fireware:2025.1:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:*
History

13 Nov 2025, 15:07

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
References () https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 - () https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 - Vendor Advisory
References () https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py - () https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py - Exploit
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 - US Government Resource
CPE cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t115-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145-w:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:2025.1:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t185:*:*:*:*:*:*:*:*
First Time Watchguard firebox Nv5
Watchguard firebox T145-w
Watchguard firebox M5600
Watchguard fireboxcloud
Watchguard firebox T55
Watchguard firebox M370
Watchguard firebox T85
Watchguard firebox T15
Watchguard firebox M440
Watchguard firebox M4800
Watchguard firebox M670
Watchguard firebox M290
Watchguard firebox M470
Watchguard firebox M690
Watchguard firebox M390
Watchguard firebox T145
Watchguard firebox T115-w
Watchguard firebox M270
Watchguard fireboxv
Watchguard
Watchguard firebox T25
Watchguard firebox M570
Watchguard fireware
Watchguard firebox T70
Watchguard firebox M5800
Watchguard firebox T45
Watchguard firebox T20
Watchguard firebox M4600
Watchguard firebox T80
Watchguard firebox T40
Watchguard firebox T125
Watchguard firebox T35
Watchguard firebox M590
Watchguard firebox T185
Watchguard firebox T125-w

12 Nov 2025, 16:15

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 -
Information

Published : 2025-09-17 08:15

Updated : 2025-11-14 02:00

NVD link : CVE-2025-9242

Mitre link : CVE-2025-9242

CVE.ORG link : CVE-2025-9242

JSON object : View

Products Affected

watchguard

  • firebox_t145-w
  • firebox_m440
  • firebox_m590
  • firebox_t15
  • firebox_t185
  • firebox_t115-w
  • firebox_t55
  • firebox_m290
  • firebox_m5600
  • firebox_m4600
  • firebox_t25
  • fireboxv
  • firebox_m570
  • firebox_t125
  • firebox_t145
  • firebox_t70
  • firebox_m270
  • firebox_t40
  • firebox_m370
  • firebox_t85
  • firebox_t20
  • firebox_m670
  • firebox_t125-w
  • firebox_t35
  • firebox_t45
  • fireboxcloud
  • firebox_m390
  • fireware
  • firebox_m690
  • firebox_m5800
  • firebox_nv5
  • firebox_t80
  • firebox_m470
  • firebox_m4800
CWE
CWE-787

Out-of-bounds Write