CVE-2025-14733

CRITICAL CISA KEV
Published Dec 19, 2025 Modified Dec 23, 2025 CWE-787

Description

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.

Is your site exposed to CVE-2025-14733?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: Dec 19, 2025 Remediation due: Dec 26, 2025

Weakness Type (CWE)

CWE-787 Out-of-bounds Write

Affected Products

Vendor Product
watchguard fireware
watchguard firebox_t15
watchguard firebox_t35
watchguard fireware
watchguard firebox_m270
watchguard firebox_m290
watchguard firebox_m370
watchguard firebox_m390
watchguard firebox_m440
watchguard firebox_m4600
watchguard firebox_m470
watchguard firebox_m4800
watchguard firebox_m5600
watchguard firebox_m570
watchguard firebox_m5800
watchguard firebox_m590
watchguard firebox_m670
watchguard firebox_m690
watchguard firebox_nv5
watchguard firebox_t20
watchguard firebox_t25
watchguard firebox_t40
watchguard firebox_t45
watchguard firebox_t55
watchguard firebox_t70
watchguard firebox_t80
watchguard firebox_t85
watchguard fireboxcloud
watchguard fireboxv
watchguard fireware
watchguard firebox_t115-w
watchguard firebox_t125
watchguard firebox_t125-w
watchguard firebox_t145
watchguard firebox_t145-w
watchguard firebox_t185

References

Frequently Asked Questions

What is CVE-2025-14733? +
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3. It has a CVSS v3.1 base score of 9.8 (CRITICAL). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
How severe is CVE-2025-14733? +
CVE-2025-14733 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.
What products are affected by CVE-2025-14733? +
CVE-2025-14733 affects products from watchguard, specifically: firebox_m270, firebox_m290, firebox_m370, firebox_m390, firebox_m440, firebox_m4600, firebox_m470, firebox_m4800, firebox_m5600, firebox_m570, firebox_m5800, firebox_m590, firebox_m670, firebox_m690, firebox_nv5, firebox_t115-w, firebox_t125, firebox_t125-w, firebox_t145, firebox_t145-w, firebox_t15, firebox_t185, firebox_t20, firebox_t25, firebox_t35, firebox_t40, firebox_t45, firebox_t55, firebox_t70, firebox_t80, firebox_t85, fireboxcloud, fireboxv, fireware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-14733? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-8358

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the …
CVE-2026-8356

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …
CVE-2026-6040

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …
CVE-2026-6039

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a …
CVE-2026-15422

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in …
CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-14733 — free, no signup required.