HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2025-11838

CVSS 8.7v4.0pub. 2025-12-04upd. 2025-12-16

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer. This vulnerability affects Fireware OS 12.6.1 up to and including 12.11.4 and 2025.1 up to and including 2025.1.2.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Watchguard Fireboxcloud

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M270

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M290

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M370

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M390

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M440

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M4600

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M470

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M4800

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M5600

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M570

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M5800

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M590

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M670

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox M690

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox Nv5

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T115 W

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T125

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T125 W

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T145

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T145 W

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T185

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T20

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T25

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T40

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T45

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T55

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T70

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T80

    HW
    Watchguard
    wszystkie wersje

  • Watchguard Firebox T85

    HW
    Watchguard
    wszystkie wersje
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassDoSVPN
CWE
References

Related vulnerabilities

CVE-2025-14733CRITICAL9.3⚠ KEVPL ✓ten sam produkt

RCE bez uwierzytelnienia w WatchGuard Fireware OS – podatność IKEv2 VPN

CVE-2025-9242CRITICAL9.3⚠ KEVPL ✓ten sam produkt

RCE przez Out-of-bounds Write w WatchGuard Fireware OS (IKEv2 VPN)

CVE-2022-26318CRITICAL9.8⚠ KEVten sam produkt

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. T...

CVE-2022-31789CRITICAL9.8ten sam produkt

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trig...

CVE-2022-25361CRITICAL9.1ten sam produkt

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from ...