Skip to main content

Critical Vulnerability in WatchGuard Firebox Under Exploitation

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

Threat ID:
CC-4733
Threat Severity:
Medium
Published:
19 December 2025 1:25 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

Threat details

CVE-2025-14733 Under Exploitation

WatchGuard has reported that CVE-2025-14733 in the Fireware OS used by Firebox is under exploitation. Successful exploitation can allow a remote unauthenticated attacker to execute arbitrary code on the Firebox appliance.

The NHS England National CSOC assesses further exploitation as likely.

Introduction

WatchGuard has released security updates to address a critical vulnerability in the Fireware operating system used by Firebox devices.

  • CVE-2025-14733 - Out-of-Bounds Write Vulnerability - CVSSv4 score: 9.3

Remediation advice

Affected organisations are strongly encouraged to review WatchGuard security advisory WGSA-2025-00027 and apply the relevant updates as soon as possible.

Last edited: 19 December 2025 1:25 pm