Yüksek CISA KEV
CVE-2025-14733: WatchGuard Firebox: aktif olarak istismar edilen açık
Açıklama (NVD)
WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.
Özet bilgiler
- EPSS
- %29,42 (yüzdelik 98)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-12-19 · Son tarih: 2025-12-26 · fidye yazılımı kampanyalarında kullanıldı
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.