CVE-2025-13940 - CVE House
Back to Database
Status published Medium CVE-2025-13940

WatchGuard Firebox Boot Time System Integrity Check Bypass

Vulnerability Description

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.This issue affects Fireware OS: from 12.8.1 through 12.11.4, from 2025.1 through 2025.1.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13940

Credits & Attribution

No credits recorded in the NVD database.

References

More from WatchGuard

View All →
CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
Critical 9.3
CVE-2025-6999
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
Medium 6.9
CVE-2025-6947
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Medium 4.8
CVE-2025-6946
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Medium 4.8
CVE-2025-4805
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration
Medium 4.8

Affected Vendor

Affected Software

Fireware OS
Vulnerable Versions:
12.8.1, 2025.1

Timeline

Official Publish: December 4th, 2025
Last Modified: December 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-440

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.