WatchGuard disclosed a critical out-of-bounds write vulnerability (CVE-2025-9242, CVSS 9.3/10) in its Firebox firewalls, allowing remote, unauthenticated attackers to execute arbitrary code on affected devices. The flaw stems from the iked process in Fireware OS, impacting versions 11.10.2–11.12.4_Update1, 12.0–12.11.3, and 2025.1, even if IKEv2 VPN configurations were removed. Exploiting this could grant attackers full control over the firewall, bypassing perimeter defenses and enabling network infiltration, lateral movement, or data exfiltration. While no active exploits are reported, the risk is severe due to firewalls being prime targets for initial access. WatchGuard released patches (e.g., 12.3.1_Update3, 12.5.13, 2025.1.1) and advised immediate updates or mitigations like restricting VPN traffic. Experts warn this aligns with 2025 trends of edge security vulnerabilities being heavily exploited for breaches.