CVE-2025-13940#

WatchGuard Firebox Boot Time System Integrity Check Bypass

Medium 6.7 CVSS v4.0 › Published 2025-12-04Updated 2026-08-10

Summary #

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.

Product status #

Product	Affected	Not affected
Fireware OS	>= 2025.1, < 2025.1.3, >= 12.8.1, < 12.11.5	>= 2025.1.3, >= 12.11.5

Weakness Type and Impact #

CWECWE-440Expected Behavior Violation
CAPECCAPEC-184Software Integrity Attack

Exploitation Status #

WatchGuard is not aware of any exploitation of this vulnerability in the wild.

Solution #

Fireware OS 2025.1.3, Fireware OS 12.11.5

References #

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026

Credits #

Discovered internally by WatchGuardfinder