This vulnerability (CVE-2025-12195) in WatchGuard Fireware OS involves an out-of-bounds write (CWE-787) in the CLI component. An authenticated user with privileged access can exploit this flaw by issuing specially crafted IPSec configuration commands, potentially leading to arbitrary code execution. The vulnerability is confirmed and published with a high CVSS 4.0 score of 8.6, indicating network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. Affected versions explicitly include Fireware OS versions 11.0, 12.0, 12.5, and 2025.1. There is no information about available patches or vendor advisories detailing remediation.

An authenticated privileged user can exploit this vulnerability to execute arbitrary code on the affected Fireware OS system. This could compromise the confidentiality, integrity, and availability of the device and potentially the network it protects. The high CVSS score reflects the significant risk posed by this vulnerability if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WatchGuard's advisories for updates. Until a fix is available, restrict privileged CLI access to trusted administrators only and consider additional network-level controls to limit exposure.