A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XWatchguard Fireboxcloud
HWWatchguardall versionsWatchguard Firebox M270
HWWatchguardall versionsWatchguard Firebox M290
HWWatchguardall versionsWatchguard Firebox M295
HWWatchguardall versionsWatchguard Firebox M370
HWWatchguardall versionsWatchguard Firebox M390
HWWatchguardall versionsWatchguard Firebox M395
HWWatchguardall versionsWatchguard Firebox M440
HWWatchguardall versionsWatchguard Firebox M4600
HWWatchguardall versionsWatchguard Firebox M470
HWWatchguardall versionsWatchguard Firebox M4800
HWWatchguardall versionsWatchguard Firebox M495
HWWatchguardall versionsWatchguard Firebox M5600
HWWatchguardall versionsWatchguard Firebox M570
HWWatchguardall versionsWatchguard Firebox M5800
HWWatchguardall versionsWatchguard Firebox M590
HWWatchguardall versionsWatchguard Firebox M595
HWWatchguardall versionsWatchguard Firebox M670
HWWatchguardall versionsWatchguard Firebox M690
HWWatchguardall versionsWatchguard Firebox M695
HWWatchguardall versionsWatchguard Firebox Nv5
HWWatchguardall versionsWatchguard Firebox T115 W
HWWatchguardall versionsWatchguard Firebox T125
HWWatchguardall versionsWatchguard Firebox T125 W
HWWatchguardall versionsWatchguard Firebox T145
HWWatchguardall versionsWatchguard Firebox T145 W
HWWatchguardall versionsWatchguard Firebox T15
HWWatchguardall versionsWatchguard Firebox T185
HWWatchguardall versionsWatchguard Firebox T20
HWWatchguardall versionsWatchguard Firebox T25
HWWatchguardall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2025-14733CRITICAL9.3⚠ KEVsame product
An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic...
CVE-2025-9242CRITICAL9.3⚠ KEVsame product
An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic...
CVE-2022-26318CRITICAL9.8⚠ KEVPL ✓same product
RCE bez uwierzytelnienia w WatchGuard Firebox i XTM (FBX-22786)
CVE-2026-13368CRITICAL9.2same product
WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authenticat...
CVE-2022-31789CRITICAL9.8PL ✓same product
Integer overflow w WatchGuard Firebox/XTM umożliwiający RCE bez uwierzytelnienia