Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-13940

WatchGuard Firebox Boot Time System Integrity Check Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WatchGuard

Description

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WatchGuard Fireware OS

Default version status: unaffected

  • 2025.1 to < 2025.1.3affected
  • 12.8.1 to < 12.11.5affected

References