WatchGuard Fireware OS Out-of-Bounds Write Vulnerability in CLI IPSec Configuration Allowing Arbitrary Code Execution

A vulnerability allowing out-of-bounds write has been identified in the CLI of WatchGuard Fireware OS. This issue could enable an authenticated privileged user to execute arbitrary code by using specially crafted IPSec configuration commands. The vulnerability is present in Fireware OS versions 11.0 through 11.12.4+541730, 12.0 through 12.11.4, 12.5 through 12.5.13, and 2025.1 through 2025.1.2.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the affected device.

Remediation

Users can upgrade to Fireware OS 2025.1.3, 12.11.5, or 12.5.14 (for T15 & T35 models) to address this vulnerability. For devices on Fireware OS 11.x, this version is no longer supported.