Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw
Source SecurityWeek
Rated by Threat Radar
Data as of 22 Oct 2025, 01:35 UTC
What to do
AI-suggested
Organizations should immediately inventory their network to identify all WatchGuard Firebox devices running Fireware OS. Until patches are confirmed and applied, restrict network access to the management interfaces and the iked service by implementing strict firewall rules and network segmentation. Employ intrusion detection and prevention systems to monitor for anomalous traffic patterns targeting the iked process or unusual VPN activity. Enable logging and conduct regular audits of device configurations and access logs to detect early signs of compromise. Coordinate with WatchGuard for timely patch deployment and verify firmware versions to ensure vulnerabilities are remediated. Consider deploying additional network security controls such as VPN gateways or next-generation firewalls to provide layered defense. Educate IT staff on the vulnerability specifics and incident response procedures to ensure rapid containment if exploitation is detected. Finally, maintain up-to-date backups and incident response plans tailored to potential network device compromises.
Description
Affecting the Fireware OS iked process, the vulnerability can lead to remote code execution and does not require authentication. The post Over 73,000 WatchGuard Firebox Devices Impacted by Recent Critical Flaw appeared first on SecurityWeek .