CVE-2025-12195

8.6 highEPSS 0.7%

High (8.6) in watchguard fireware. EPSS 0.7% chance of exploitation in the next 30 days.

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2025-12-04
Modified: 2026-08-10
Record from: the NVD, synced 2026-10-19

Affected

watchguard:fireware

References

https://psirt.watchguard.com/CVE-2025-12195
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00019

Check your stack JSON