This vulnerability in WatchGuard Fireware OS's SIP Proxy module involves improper neutralization of input during web page generation, leading to stored cross-site scripting (CWE-79). It affects Fireware OS versions 12.0, 12.5, and 2025.1 as explicitly stated. This issue represents an additional unmitigated attack vector for the previously identified CVE-2025-6947. No official patch or remediation level has been published by the vendor as of the data provided.

Successful exploitation could allow an attacker with high privileges and partial user interaction to execute stored XSS attacks within the affected Fireware OS versions. This may lead to script execution in the context of the affected web interface, potentially impacting confidentiality or integrity of the management interface. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, partial user interaction, and limited scope impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor WatchGuard advisories for updates. Until a patch is available, limit exposure by restricting access to the management interface and applying best practices for user input validation where possible.