PT-2025-49158 · Watchguard · Watchguard Fireware

Published 2025-12-04 · Updated 2025-12-16 · CVE-2025-11838

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 2025.1 through 2025.1.2

Description A memory corruption issue exists in WatchGuard Fireware OS. An unauthenticated attacker can potentially cause a Denial of Service (DoS) condition. This can occur in Mobile User VPN with IKEv2 and Branch Office VPN using IKEv2 when a dynamic gateway peer is configured.

Recommendations WatchGuard Fireware OS versions prior to 12.0 should be updated. WatchGuard Fireware OS versions 12.0 through 12.11.4 should be updated. WatchGuard Fireware OS versions prior to 2025.1.2 should be updated. WatchGuard Fireware OS versions 2025.1 through 2025.1.2 should be updated.

Fix

DoS

Weakness Enumeration

CWE-763

Related Identifiers

BDU:2025-15560

CVE-2025-11838

Affected Products

Watchguard Fireware

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-11838 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11838 · Vendor Advisory
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15560 · Security Note
• https://t.me/cveNotify/145876 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1996825700817350966 · Twitter Post
• https://twitter.com/CVEnew/status/1996704779087593813 · Twitter Post
• https://t.me/cveNotify/145334 · Telegram Post
• https://t.me/cveNotify/144805 · Telegram Post