Story perspectives

Over 73,000 WatchGuard Devices Vulnerable to Remote Attacks

10/22/2025

35 2

Summary

Story summary

Over 73,000 WatchGuard Firebox devices remain unpatched against CVE-2025-9242, allowing unauthenticated remote attackers to execute arbitrary code.
The vulnerability affects multiple Fireware OS versions and both Mobile User VPN and Branch Office VPN configurations.
Patches were released in mid-September 2025.
The Shadowserver Foundation reports 24,000 vulnerable devices in the United States and others in Germany, Italy, the United Kingdom, and Canada.

1 of 1

Story summary

Over 73,000 WatchGuard Firebox devices remain unpatched against CVE-2025-9242, allowing unauthenticated remote attackers to execute arbitrary code.
The vulnerability affects multiple Fireware OS versions and both Mobile User VPN and Branch Office VPN configurations.
Patches were released in mid-September 2025.
The Shadowserver Foundation reports 24,000 vulnerable devices in the United States and others in Germany, Italy, the United Kingdom, and Canada.