This vulnerability in WatchGuard Fireware OS involves an out-of-bounds write in the iked process, impacting VPN configurations using IKEv2 with dynamic gateway peers. The flaw may persist on devices previously configured with these VPN types, even after their deletion, if a static gateway peer branch office VPN remains configured. Successful exploitation could enable remote unauthenticated attackers to execute arbitrary code on the affected device. The CVSS 4.0 base score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker can remotely exploit this vulnerability without authentication or user interaction to execute arbitrary code on the Fireware OS device. This could lead to full compromise of the device, affecting confidentiality, integrity, and availability of the system and potentially the network it protects.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the WatchGuard vendor advisory for current remediation guidance. Until a fix is available, consider reviewing VPN configurations to minimize exposure, but specific mitigations are not detailed in the provided information.