Vulnerability-Lookup

CVE-2025-11838 (GCVE-0-2025-11838)

Vulnerability from cvelistv5 – Published: 2025-12-04 21:48 – Updated: 2026-08-10 15:40

Title

WatchGuard Firebox iked Memory Corruption Vulnerability

Summary

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-05 15:44 UTC

CWE

CWE-763

Assigner

WatchGuard CNA under the mitre root

CNA scorecard A 91/100 over 93 records in the last 180 days details

References

2 references

URL	Tags
https://psirt.watchguard.com/CVE-2025-11838	vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wg…

Impacted products

1 product

Vendor	Product	Version	CPE status
WatchGuard	Fireware OS	Affected: 2025.1 , ≤ 2025.1.3 (custom) Affected: 12.6.1 , ≤ 12.11.5 (custom) cpe:2.3:a:watchguard:fireware_os:::::::: cpe:2.3:a:watchguard:fireware_os::::::::

Date Public

2025-12-04 21:48

Credits

McCaulay Hudson (@_McCaulay) of watchTowr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-11838",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T15:44:19.445395Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T15:44:31.064Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Default"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThanOrEqual": "2025.1.3",
              "status": "affected",
              "version": "2025.1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "12.11.5",
              "status": "affected",
              "version": "12.6.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "2025.1.3",
                  "versionStartIncluding": "2025.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "12.11.5",
                  "versionStartIncluding": "12.6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "McCaulay Hudson (@_McCaulay) of watchTowr"
        }
      ],
      "datePublic": "2025-12-04T21:48:10.961Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-763",
              "description": "CWE-763",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T15:40:56.274Z",
        "orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "shortName": "WatchGuard"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.watchguard.com/CVE-2025-11838"
        },
        {
          "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Fireware OS 2025.1.3, Fireware OS 12.11.5"
        }
      ],
      "title": "WatchGuard Firebox iked Memory Corruption Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
    "assignerShortName": "WatchGuard",
    "cveId": "CVE-2025-11838",
    "datePublished": "2025-12-04T21:48:10.961Z",
    "dateReserved": "2025-10-16T06:58:57.085Z",
    "dateUpdated": "2026-08-10T15:40:56.274Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-11838",
      "date": "2026-10-29",
      "epss": "0.00499",
      "percentile": "0.42697"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "platforms": [
                  "Default"
                ],
                "product": "Fireware OS",
                "vendor": "WatchGuard",
                "versions": [
                  {
                    "lessThanOrEqual": "2025.1.3",
                    "status": "affected",
                    "version": "2025.1",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "12.11.5",
                    "status": "affected",
                    "version": "12.6.1",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "46DAB795-8DD0-4D6C-99D5-B9057E76DB87",
                    "versionEndExcluding": "2025.1.3",
                    "versionStartIncluding": "2025.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E8AAE66B-DD19-4C90-8DFC-F77BA1541642",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FC18430-C6B4-4395-BFF1-83BB005875BA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8FE309D6-BD5E-4D18-91C3-A492C3576115",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "75959D39-0960-4836-96C7-DB8048DDE4B8",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D0087049-27C6-4B18-A645-72A8F63D7C6D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8A7E5749-EB5F-41C5-8CD9-1C4A0FF6E738",
                    "versionEndExcluding": "12.11.5",
                    "versionStartIncluding": "12.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E472917E-D6E1-4C2D-B37D-E76FCC7307CA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9A8C7779-4466-4A9E-B191-929E7746DFF7",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6CE9A123-B769-4E56-845E-DC3DA6166C78",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "180FAE8C-2E73-4C09-AA11-0C82A7715FA3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "309DBEF2-1D92-4641-827F-D99758B5FFA3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BBFBA966-E052-4350-9544-3B5D484DBB6B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF1E586D-0E88-447A-95E8-5203EF869ADB",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1BC087C4-CB10-46D4-A746-0C462354410C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59389EA2-3067-4AF8-AEC5-FE79E269C170",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "445FA7CD-D0AE-4176-9AE5-293B918DE654",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1B4A7366-0304-431E-B3E4-719BA575CEAC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E8512B4A-5269-4067-B9C6-475A4E8AD313",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "179C6166-87E1-44F8-B727-CDDE40C673D9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "584107CC-6136-4AA1-AE68-73B93BDDB5B6",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9295217E-C1A0-4A69-A0F0-C44814BB376C",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7DC49246-2166-4681-8D67-4C0940884872",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC853916-8BDC-4F7C-BA53-D6AB490A9444",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D3562304-0317-4A3C-B622-D5CE01CC97F9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "327BA50A-366A-4367-93B8-328EC0136FA7",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3552F3BB-8021-4E87-987D-870699A7E619",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4ECAE1D7-9868-4730-B645-44CB1B6FDE96",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de corrupci\u00f3n de memoria en WatchGuard Fireware OS puede permitir a un atacante no autenticado activar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en la VPN de usuario m\u00f3vil con IKEv2 y la VPN de sucursal usando IKEv2 cuando se configura con un par de puerta de enlace din\u00e1mico.\n\nEsta vulnerabilidad afecta a Fireware OS 12.0 hasta e incluyendo 12.11.4 y 2025.1 hasta e incluyendo 2025.1.2."
          }
        ],
        "id": "CVE-2025-11838",
        "lastModified": "2026-09-25T23:10:00.463",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-11838",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T15:44:19.445395Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-12-04T22:15:46.610",
        "references": [
          {
            "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
            "url": "https://psirt.watchguard.com/CVE-2025-11838"
          },
          {
            "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
          }
        ],
        "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-763"
              }
            ],
            "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-12-16T00:25:58+00:00",
      "cve": "CVE-2025-11838",
      "id": "CVE-2025-11838",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "WatchGuard Firebox iked Memory Corruption Vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11838.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-11838",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-12-05T15:44:19.445395Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-12-05T15:44:27.484Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Default"
              ],
              "product": "Fireware OS",
              "vendor": "WatchGuard",
              "versions": [
                {
                  "lessThanOrEqual": "2025.1.3",
                  "status": "affected",
                  "version": "2025.1",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "12.11.5",
                  "status": "affected",
                  "version": "12.6.1",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                      "versionEndIncluding": "2025.1.3",
                      "versionStartIncluding": "2025.1",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                      "versionEndIncluding": "12.11.5",
                      "versionStartIncluding": "12.6.1",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ],
              "operator": "OR"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "McCaulay Hudson (@_McCaulay) of watchTowr"
            }
          ],
          "datePublic": "2025-12-04T21:48:10.961Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer."
            }
          ],
          "exploits": [
            {
              "lang": "en",
              "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-763",
                  "description": "CWE-763",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-10T15:40:56.274Z",
            "orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
            "shortName": "WatchGuard"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://psirt.watchguard.com/CVE-2025-11838"
            },
            {
              "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Fireware OS 2025.1.3, Fireware OS 12.11.5"
            }
          ],
          "title": "WatchGuard Firebox iked Memory Corruption Vulnerability"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "assignerShortName": "WatchGuard",
        "cveId": "CVE-2025-11838",
        "datePublished": "2025-12-04T21:48:10.961Z",
        "dateReserved": "2025-10-16T06:58:57.085Z",
        "dateUpdated": "2026-08-10T15:40:56.274Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2025-15560 (CVE-2025-11838)

Vulnerability from fstec – Published: 2025-12-11 – Updated: 2025-12-11 – View on bdu.fstec.ru Fixed

Title

Уязвимость технологий Branch Office VPN (BOVPN) и Mobile User VPN with IKEv2 операционной системы WatchGuard Fireware, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость технологий Branch Office VPN (BOVPN) и Mobile User VPN with IKEv2 операционной системы WatchGuard Fireware связана с освобождением неверного указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-763 - Освобождение неверного указателя или ссылки

Aliases

CVE-2025-11838

References

1 reference

URL
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018

Impacted products

1 product from 1 vendor

Vendors

Watchguard Technologies Inc.

Products

Fireware OS

Versions

от 2025.1 до 2025.1.2 включительно (Fireware OS), от 12.0 до 12.11.4 включительно (Fireware OS)

Product types

Operating system

Platforms

Watchguard Technologies Inc. Fireware OS от 2025.1 до 2025.1.2 включительно, Watchguard Technologies Inc. Fireware OS от 12.0 до 12.11.4 включительно

Mitigations

Использование рекомендаций: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": "AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Watchguard Technologies Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 2025.1 \u0434\u043e 2025.1.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS), \u043e\u0442 12.0 \u0434\u043e 12.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "11.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.12.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-15560",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-11838",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Fireware OS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Watchguard Technologies Inc. Fireware OS \u043e\u0442 2025.1 \u0434\u043e 2025.1.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Watchguard Technologies Inc. Fireware OS \u043e\u0442 12.0 \u0434\u043e 12.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Branch Office VPN (BOVPN) \u0438 Mobile User VPN with IKEv2 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b WatchGuard Fireware, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438 (CWE-763)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Branch Office VPN (BOVPN) \u0438 Mobile User VPN with IKEv2 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b WatchGuard Fireware \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-763",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,7)"
}

FKIE_CVE-2025-11838

Vulnerability from fkie_nvd - Published: 2025-12-04 22:15 - Updated: 2026-09-25 23:10

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	5d1c2695-1a31-4499-88ae-e847036fd7e3	https://psirt.watchguard.com/CVE-2025-11838
	5d1c2695-1a31-4499-88ae-e847036fd7e3	https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018	Vendor Advisory

Impacted products

Vendor	Product	Version
watchguard	fireware	*
watchguard	firebox_t115-w	-
watchguard	firebox_t125	-
watchguard	firebox_t125-w	-
watchguard	firebox_t145	-
watchguard	firebox_t145-w	-
watchguard	firebox_t185	-
watchguard	fireware	*
watchguard	firebox_m270	-
watchguard	firebox_m290	-
watchguard	firebox_m370	-
watchguard	firebox_m390	-
watchguard	firebox_m440	-
watchguard	firebox_m4600	-
watchguard	firebox_m470	-
watchguard	firebox_m4800	-
watchguard	firebox_m5600	-
watchguard	firebox_m570	-
watchguard	firebox_m5800	-
watchguard	firebox_m590	-
watchguard	firebox_m670	-
watchguard	firebox_m690	-
watchguard	firebox_nv5	-
watchguard	firebox_t20	-
watchguard	firebox_t25	-
watchguard	firebox_t40	-
watchguard	firebox_t45	-
watchguard	firebox_t55	-
watchguard	firebox_t70	-
watchguard	firebox_t80	-
watchguard	firebox_t85	-
watchguard	fireboxcloud	-
watchguard	fireboxv	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Default"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThanOrEqual": "2025.1.3",
              "status": "affected",
              "version": "2025.1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "12.11.5",
              "status": "affected",
              "version": "12.6.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "46DAB795-8DD0-4D6C-99D5-B9057E76DB87",
              "versionEndExcluding": "2025.1.3",
              "versionStartIncluding": "2025.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8AAE66B-DD19-4C90-8DFC-F77BA1541642",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FC18430-C6B4-4395-BFF1-83BB005875BA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FE309D6-BD5E-4D18-91C3-A492C3576115",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75959D39-0960-4836-96C7-DB8048DDE4B8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0087049-27C6-4B18-A645-72A8F63D7C6D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A7E5749-EB5F-41C5-8CD9-1C4A0FF6E738",
              "versionEndExcluding": "12.11.5",
              "versionStartIncluding": "12.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E472917E-D6E1-4C2D-B37D-E76FCC7307CA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A8C7779-4466-4A9E-B191-929E7746DFF7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CE9A123-B769-4E56-845E-DC3DA6166C78",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "180FAE8C-2E73-4C09-AA11-0C82A7715FA3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "309DBEF2-1D92-4641-827F-D99758B5FFA3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBFBA966-E052-4350-9544-3B5D484DBB6B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF1E586D-0E88-447A-95E8-5203EF869ADB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BC087C4-CB10-46D4-A746-0C462354410C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59389EA2-3067-4AF8-AEC5-FE79E269C170",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "445FA7CD-D0AE-4176-9AE5-293B918DE654",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B4A7366-0304-431E-B3E4-719BA575CEAC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8512B4A-5269-4067-B9C6-475A4E8AD313",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "179C6166-87E1-44F8-B727-CDDE40C673D9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "584107CC-6136-4AA1-AE68-73B93BDDB5B6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9295217E-C1A0-4A69-A0F0-C44814BB376C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DC49246-2166-4681-8D67-4C0940884872",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC853916-8BDC-4F7C-BA53-D6AB490A9444",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3562304-0317-4A3C-B622-D5CE01CC97F9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "327BA50A-366A-4367-93B8-328EC0136FA7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3552F3BB-8021-4E87-987D-870699A7E619",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4ECAE1D7-9868-4730-B645-44CB1B6FDE96",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de corrupci\u00f3n de memoria en WatchGuard Fireware OS puede permitir a un atacante no autenticado activar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en la VPN de usuario m\u00f3vil con IKEv2 y la VPN de sucursal usando IKEv2 cuando se configura con un par de puerta de enlace din\u00e1mico.\n\nEsta vulnerabilidad afecta a Fireware OS 12.0 hasta e incluyendo 12.11.4 y 2025.1 hasta e incluyendo 2025.1.2."
    }
  ],
  "id": "CVE-2025-11838",
  "lastModified": "2026-09-25T23:10:00.463",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.7,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-11838",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-12-05T15:44:19.445395Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-12-04T22:15:46.610",
  "references": [
    {
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "url": "https://psirt.watchguard.com/CVE-2025-11838"
    },
    {
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
    }
  ],
  "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-763"
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "type": "Secondary"
    }
  ]
}

GHSA-J82H-27VV-GHVV

Vulnerability from github – Published: 2025-12-05 00:31 – Updated: 2026-08-10 18:31

Details

This vulnerability affects Fireware OS 12.0 up to and including 12.11.4 and 2025.1 up to and including 2025.1.2.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-11838"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-763"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-04T22:15:46Z",
    "severity": "HIGH"
  },
  "details": "A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.\n\nThis vulnerability affects Fireware OS 12.0 up to and including 12.11.4 and 2025.1 up to and including 2025.1.2.",
  "id": "GHSA-j82h-27vv-ghvv",
  "modified": "2026-08-10T18:31:59Z",
  "published": "2025-12-05T00:31:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11838"
    },
    {
      "type": "WEB",
      "url": "https://psirt.watchguard.com/CVE-2025-11838"
    },
    {
      "type": "WEB",
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

WID-SEC-W-2025-2749

Vulnerability from csaf_certbund - Published: 2025-12-04 23:00 - Updated: 2025-12-04 23:00

Summary

WatchGuard Firebox: Mehrere Schwachstellen

Severity

Mittel

Scope

10 vulnerabilities in this advisory, including CVE-2025-11838.

CVE-2025-11838

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-11838 (GCVE-0-2025-11838)

BDU:2025-15560 (CVE-2025-11838)

FKIE_CVE-2025-11838

GHSA-J82H-27VV-GHVV

WID-SEC-W-2025-2749

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour