Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw

More than 73,000 WatchGuard Firebox devices remain unpatched against a recent critical-severity vulnerability, according to The Shadowserver Foundation. The flaw, tracked as CVE-2025-9242 with a CVSS score of 9.3, affects Fireware OS versions including 11.10.2 to 11.12.4_Update1, 12.0 to 12.11.3, and 2025.1, and allows unauthenticated remote attackers to execute arbitrary code via the iked process.

Shadowserver’s scans show roughly 24,000 of the vulnerable devices are in the US, with Germany (7,000), Italy (6,500), UK (5,300) and Canada (3,900) making up the top five, distributed across more than 100 countries. WatchGuard had released patches in mid-September for Fireware OS versions 2025.1.1, 12.11.4, 12.5.13, and 12.3.1_Update3 (B722811) and warned that over 30 firewall models are affected, including Firebox Cloud, Firebox NV5, and FireboxV. Organisations are advised to apply the patches as soon as possible given the risk of remote code execution.