CVE-2025-13940

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-13940
An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://psirt.watchguard.com/CVE-2025-13940
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*
History

25 Sep 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de Violación de Comportamiento Esperado [CWE-440] en WatchGuard Fireware OS puede permitir a un atacante eludir la comprobación de integridad del sistema en tiempo de arranque de Fireware OS y evitar que el Firebox se apague en caso de un fallo en la comprobación de integridad del sistema. La comprobación de integridad del sistema bajo demanda en la UI web de Fireware mostrará correctamente un mensaje de fallo en la comprobación de integridad del sistema en caso de un fallo. Este problema afecta a Fireware OS: desde 12.8.1 hasta 12.11.4, desde 2025.1 hasta 2025.1.2.
Information

Published : 2025-12-04 22:15

Updated : 2026-09-25 23:10

NVD link : CVE-2025-13940

Mitre link : CVE-2025-13940

CVE.ORG link : CVE-2025-13940

JSON object : View

Products Affected

watchguard

  • firebox_m270
  • firebox_m5800
  • firebox_m4600
  • firebox_t80
  • fireware
  • firebox_m370
  • firebox_m470
  • firebox_nv5
  • firebox_t25
  • firebox_m590
  • firebox_t145-w
  • firebox_t20
  • firebox_t185
  • firebox_t85
  • firebox_t115-w
  • firebox_m290
  • firebox_t70
  • firebox_t55
  • firebox_m5600
  • firebox_t40
  • fireboxcloud
  • firebox_m4800
  • firebox_m670
  • firebox_m570
  • firebox_m690
  • fireboxv
  • firebox_t125
  • firebox_t125-w
  • firebox_t45
  • firebox_t145
  • firebox_m390
  • firebox_m440
CWE
CWE-440

Expected Behavior Violation