Critical Out-of-Bounds Write Vulnerability Discovered in WatchGuard Firebox

What changed

An out-of-bounds write vulnerability has been identified in the WatchGuard Fireware OS, specifically within the iked process. This flaw could enable remote, unauthenticated attackers to execute arbitrary code, raising serious security concerns for users.

The vulnerability primarily affects configurations involving the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when set up with a dynamic gateway peer.

Who is affected

The vulnerability impacts various configurations of the WatchGuard Firebox, particularly those that previously utilized specific VPN setups.

Organizations that have configured their Firebox with the mobile user VPN or branch office VPN using IKEv2 are at risk, especially if they have not fully removed outdated configurations.

• WatchGuard Firebox devices with Fireware OS.
• Organizations using mobile user VPN with IKEv2.
• Companies utilizing branch office VPN configurations.
• Any entity that has not updated or removed obsolete VPN settings.

What to do

It is crucial for affected organizations to assess their Firebox configurations and ensure that any obsolete VPN setups are completely removed to mitigate risks.

Regular updates and patches from WatchGuard should be monitored and applied promptly to safeguard against potential exploitation.

• Review and update Firebox configurations.
• Remove any outdated VPN configurations.
• Monitor for updates from WatchGuard regarding this vulnerability.
• Implement additional security measures to protect network integrity.