HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2025-11838

CVSS 8.7v4.0pub. 2025-12-04upd. 2026-08-10

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Watchguard Fireboxcloud

    HW
    Watchguard
    all versions

  • Watchguard Firebox M270

    HW
    Watchguard
    all versions

  • Watchguard Firebox M290

    HW
    Watchguard
    all versions

  • Watchguard Firebox M370

    HW
    Watchguard
    all versions

  • Watchguard Firebox M390

    HW
    Watchguard
    all versions

  • Watchguard Firebox M440

    HW
    Watchguard
    all versions

  • Watchguard Firebox M4600

    HW
    Watchguard
    all versions

  • Watchguard Firebox M470

    HW
    Watchguard
    all versions

  • Watchguard Firebox M4800

    HW
    Watchguard
    all versions

  • Watchguard Firebox M5600

    HW
    Watchguard
    all versions

  • Watchguard Firebox M570

    HW
    Watchguard
    all versions

  • Watchguard Firebox M5800

    HW
    Watchguard
    all versions

  • Watchguard Firebox M590

    HW
    Watchguard
    all versions

  • Watchguard Firebox M670

    HW
    Watchguard
    all versions

  • Watchguard Firebox M690

    HW
    Watchguard
    all versions

  • Watchguard Firebox Nv5

    HW
    Watchguard
    all versions

  • Watchguard Firebox T115 W

    HW
    Watchguard
    all versions

  • Watchguard Firebox T125

    HW
    Watchguard
    all versions

  • Watchguard Firebox T125 W

    HW
    Watchguard
    all versions

  • Watchguard Firebox T145

    HW
    Watchguard
    all versions

  • Watchguard Firebox T145 W

    HW
    Watchguard
    all versions

  • Watchguard Firebox T185

    HW
    Watchguard
    all versions

  • Watchguard Firebox T20

    HW
    Watchguard
    all versions

  • Watchguard Firebox T25

    HW
    Watchguard
    all versions

  • Watchguard Firebox T40

    HW
    Watchguard
    all versions

  • Watchguard Firebox T45

    HW
    Watchguard
    all versions

  • Watchguard Firebox T55

    HW
    Watchguard
    all versions

  • Watchguard Firebox T70

    HW
    Watchguard
    all versions

  • Watchguard Firebox T80

    HW
    Watchguard
    all versions

  • Watchguard Firebox T85

    HW
    Watchguard
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassDoSVPN
CWE
References

Related vulnerabilities

CVE-2025-14733CRITICAL9.3⚠ KEVsame product

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic...

CVE-2025-9242CRITICAL9.3⚠ KEVsame product

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic...

CVE-2022-26318CRITICAL9.8⚠ KEVPL ✓same product

RCE bez uwierzytelnienia w WatchGuard Firebox i XTM (FBX-22786)

CVE-2026-13368CRITICAL9.2same product

WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authenticat...

CVE-2022-31789CRITICAL9.8PL ✓same product

Integer overflow w WatchGuard Firebox/XTM umożliwiający RCE bez uwierzytelnienia