PT-2025-37771 · Watchguard · Watchguard Fireware

Published 2025-09-15 · Updated 2025-09-16 · CVE-2025-6999

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.2

Description An HTTP Request Smuggling vulnerability exists in the Authentication portal of WatchGuard Fireware OS, allowing a remote attacker to evade request parameter sanitation and potentially perform a reflected self-Cross-Site Scripting (XSS) attack.

Recommendations Update to a version later than 12.11.2.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2025-6999

Affected Products

Watchguard Fireware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-6999 · Security Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2025-00014 · Note
• https://twitter.com/CVEnew/status/1967819571689140353 · Twitter Post