Known Exploited Vulnerabilities December 19, 2025 · CISA KEV Catalog

CVE-2025-14733: Watch Guard Firebox Out of Bounds Write Vulnerability

Summary: CVE-2025-14733 is an out of bounds write vulnerability in the WatchGuard Fireware OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code. It affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer, and CISA lists it as known to be used in ransomware campaigns with a remediation due date of 2025-12-26.
Key Takeaway: This flaw is reachable by an unauthenticated attacker over IKEv2 and is already tied to ransomware use, so any Firebox running a VPN with a dynamic gateway peer is exposed before authentication even enters the picture.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-14733 WatchGuard
Related: CVE-2025-9242: Watch Guard Firebox Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Nov 12, 2025
CVE-2022-23176: Watch Guard Firebox and XTM Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Apr 11, 2022
CVE-2022-26318: Watch Guard Firebox and XTM Appliances Arbitrary Code Execution Known Exploited Vulnerabilities · Mar 25, 2022