CVE-2025-13940CWE-440

CVE-2025-13940

Medium · published December 5, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-440 · Expected Behavior Violation
Published
2025-12-05T03:15Z
Affected products (2)
ProductVersionsFixed in
watchguard/fireware≥ 2025.1, < 2025.1.32025.1.3
watchguard/fireware≥ 12.8.1, < 12.11.512.11.5
References (2)
https://psirt.watchguard.com/CVE-2025-13940 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 04 DEC 21:47Z
    WatchGuard Firebox Boot Time System Integrity Check Bypass
    cvelistv5