Over 73,000 WatchGuard Firebox devices remain unpatched despite the release of security updates that fix a critical vulnerability (CVE-2025-9242). This flaw allows remote attackers to execute arbitrary code, putting numerous organizations at risk worldwide. #WatchGuard #CVE-2025-9242
Keypoints
- The vulnerability affects Fireware OS versions 11.10.2 to 11.12.4_Update1, 12.0 to 12.11.3, and 2025.1.
- Over 30 Firebox models, including Firebox Cloud, Firebox NV5, and FireboxV, are vulnerable.
- The flaw is an out-of-bounds write in the ‘iked’ process, exploitable without authentication.
- Despite patches released in September, hundreds of thousands of devices remain exposed globally.
- Organizations are urged to update their Firebox devices immediately to mitigate the risk.
Read More: https://www.securityweek.com/over-73000-watchguard-firebox-devices-impacted-by-recent-critical-flaw/