CVE-2025-13940

Опубликовано: 04 дек. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.This issue affects Fireware OS: from 12.8.1 through 12.11.4, from 2025.1 through 2025.1.2.

Ссылки

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 2025.1 (включая) до 2025.1.3 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 12.8.1 (включая) до 12.11.5 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00015

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-440

Связанные уязвимости

GHSA-pw6w-rvw4-j57r

CVSS3: 5.5

github

2 месяца назад

BDU:2025-15420

CVSS3: 4.4

fstec