PT-2025-43675 · Watchguard · Firebox+1

Published 2025-10-24 · Updated 2025-10-24 · CVE-2025-4106

Positive Technologies (AI Summary)

CVSS v4.0

8.9

High

Base vector

AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Fireware OS versions prior to 12.11.2

Description An authenticated administrator user with access to both the management WebUI and command line interface on a Firebox device can enable a diagnostic debug shell. This is achieved by uploading a platform and version-specific diagnostic package and then executing a leftover diagnostic command.

Recommendations Update to Fireware OS version 12.11.2 or later.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2025-4106

Affected Products

Firebox

Fireware Os

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-4106 · Security Note
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2025-00010 · Note
• https://t.me/cveNotify/140314 · Telegram Post
• https://twitter.com/CveFindCom/status/1981837997449400592 · Twitter Post
• https://t.me/CVEtracker/35718 · Telegram Post
• https://twitter.com/CVEnew/status/1981840714565849160 · Twitter Post