← Database

CVE-2025-13940

MEDIUM CVSS: 5.5 Published: 2025-12-04 Modified: 2026-08-10

Description

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.

Affected Platforms

Watchguard Firebox T125Watchguard Firebox M290Watchguard Firebox T20Watchguard Firebox M690Watchguard Firebox T25Watchguard Firebox T80Watchguard FirewareWatchguard Firebox T145-WWatchguard Firebox T55Watchguard Firebox T125-W

Weakness Type

CWE-440

References