PT-2025-49155 · Watchguard · Watchguard Fireware

Cody Sixteen · Published 2025-12-04 · Updated 2025-12-10 · CVE-2025-12195

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.0 through 11.12.4+541730 WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2

Description An out-of-bounds write issue exists in the Command Line Interface (CLI) of WatchGuard Fireware OS. A user with privileged access can potentially execute arbitrary code by using specifically designed IPSec configuration commands. The issue stems from improper handling of input when configuring IPSec, allowing a malicious actor to write data beyond the allocated buffer. This could lead to system compromise.

Recommendations WatchGuard Fireware OS versions 11.0 through 11.12.4+541730 should be updated. WatchGuard Fireware OS versions 12.0 through 12.11.4 should be updated. WatchGuard Fireware OS versions 12.5 through 12.5.13 should be updated. WatchGuard Fireware OS versions 2025.1 through 2025.1.2 should be updated.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-15417

CVE-2025-12195

Affected Products

Watchguard Fireware

References · 7

• https://watchguard.com/wgrd-psirt/advisory/wgsa-2025-00019 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12195 · Security Note
• https://bdu.fstec.ru/vul/2025-15417 · Security Note
• https://twitter.com/CVEnew/status/1996698858722619482 · Twitter Post
• https://t.me/cveNotify/144807 · Telegram Post
• https://t.me/cveNotify/145336 · Telegram Post