What is CVE-2025-12195?

CVE-2025-12195 is a high-severity vulnerability in Watchguard Fireboxcloud, classified under Out-of-bounds Write. CVSS score: 7.2/10. Published 2025-12-04.

How severe is CVE-2025-12195?

High severity. CVSS v3 base score is 7.2 out of 10.

Buffer overflow in Watchguard Fireboxcloud

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0…

Vulnerability class: Buffer Overflow

EPSS: 0.006 (42.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Watchguard Fireboxcloud
Watchguard Firebox_m270
Watchguard Firebox_m290
Watchguard Firebox_m370
Watchguard Firebox_m390
Watchguard Firebox_m440
Watchguard Firebox_m4600
Watchguard Firebox_m470
Watchguard Firebox_m4800
Watchguard Firebox_m5600

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

5d1c2695-1a31-4499-88ae-e847036fd7e3 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-12195?: CVE-2025-12195 is a high-severity vulnerability in Watchguard Fireboxcloud, classified under Out-of-bounds Write. CVSS score: 7.2/10. Published 2025-12-04.
How severe is CVE-2025-12195?: High severity. CVSS v3 base score is 7.2 out of 10.