Security vulnerabilities in Fireware OS

The GCVE catalog currently lists 60 vulnerability records affecting Fireware OS.

Among the 11 records analyzed by CyStack, 11 are High or Critical and 1 appear in the CISA KEV catalog.

Fireware OS is WatchGuard’s network security operating system that runs on Firebox appliances, delivering firewall, VPN, and centralized management capabilities for enterprise networks. It supports management via Web UI, WatchGuard Cloud, and CLI across Firebox models. The product family targets organizations deploying on-premises or hybrid network security with centralized policy control.

1. Verify you are running a patched Fireware OS version that mitigates the iked out-of-bounds write vulnerability; apply the available upgrade from the WatchGuard software center. 2. Immediately check all Fireboxes with IKEv2 configurations for signs of exploitation and remote compromise; inspect recent logs and indicators of compromise. 3. Restrict management access to Fireboxes (Web UI/CLI) to trusted networks and disable unnecessary VPN services if feasible until patches are applied. 4. Follow WatchGuard advisories for endpoint and VPN hardening guidance and perform credential rotation if compromise is suspected. 5. Maintain a monitored baseline with centralized logging in WatchGuard Cloud or your SIEM; enable alerting on VPN and iked-process anomalies.