CVE-2025-14733
CRITICAL KEVWatchGuard Fireware <=12.11.5/2025.1.3 - Unauthenticated RCE via IKEv2 VPN
Title source: llmExploitation Summary
CVE-2025-14733 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 19, 2025. EIP tracks 2 public exploits from researchers including kooyaniks, machevalia.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-14733, an out-of-bounds write vulnerability in WatchGuard Firebox's iked process. It includes binary analysis, function identification, and attack surface details but does not contain exploit code.
Description
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.
Exploits (2)
This repository provides a detailed technical analysis of CVE-2025-14733, an out-of-bounds write vulnerability in WatchGuard Firebox's iked process. It includes binary analysis, function identification, and attack surface details but does not contain exploit code.
This repository contains a Python-based scanner for detecting WatchGuard IKEv2 services potentially vulnerable to CVE-2025-14733. It sends crafted IKE_SA_INIT packets and parses responses to identify WatchGuard devices and their versions.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H