CVE-2025-9242 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2025-9242CRITICAL

WatchGuard Firebox iked Out of Bounds Write Vulnerability

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .9130   99.8   YES

AFFECTED
  Product      Versions  Fixed
  Fireware OS  11.0 –    —
  Fireware OS  12.0 –    —
  Fireware OS  12.0 –    —

TIMELINE
  Aug 20  Reserved by WatchGuard
  Nov 12  Added to CISA KEV, remediation due 2025-12-03
  Nov 12  Published (CNA: WatchGuard)
  Aug 9   EXPLOIT PUBLISHED — CVE-2025-9242 (WatchGuard Fireware OS). Public exploit reference added.

CWE-787 · CNA: WatchGuard · CVSS v4.0 · 4 references · NVD status: Analyzed · KEV due December 3, 2025

Description

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. If the Firebox was previously configured with the mobile user VPN with IKEv2 or a branch office VPN using IKEv2 to a dynamic gateway peer, and both of those configurations have since been deleted, that Firebox may still be vulnerable if a branch office VPN to a static gateway peer is still configured.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
August 20, 2025	Reserved	Reserved by WatchGuard
November 12, 2025	KEV ADDED	Added to CISA KEV, remediation due 2025-12-03
November 12, 2025	Published	Published (CNA: WatchGuard)
August 9, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2025-9242 (WatchGuard Fireware OS). Public exploit reference added.

Affected

Affected products and packages — 3 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
WatchGuard	Fireware OS	—	11.0	—
WatchGuard	Fireware OS	—	12.0	—
WatchGuard	Fireware OS	—	12.0	—

Weaknesses

CWE-787

References (4)

https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py [Exploit]
https://psirt.watchguard.com/CVE-2025-9242 [Broken Link]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242 [US Government Resource]
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 [Vendor Advisory]

Authoritative record: CVE-2025-9242 at cve.org

Vendors: watchguard

Weaknesses: CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-9242 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.