WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| WatchGuard | Fireware OS | unaffected |
|
||||||||||||
| WatchGuard | Fireware OS | unaffected |
|
||||||||||||
| WatchGuard | Fireware OS | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
|
No data.
| Vendor | Product | Versions | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Watchguard | Fireware Os |
|
Vendor Solution
Fireware OS 2026.2.1, Fireware OS 12.12.1, Fireware OS 12.11.9
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.332% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Watchguard firebox M5600
Watchguard firebox M5800 |
|
| CPEs | cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Watchguard firebox M5600
Watchguard firebox M5800 |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Watchguard firebox Cloud
Watchguard firebox M270 Watchguard firebox M290 Watchguard firebox M295 Watchguard firebox M370 Watchguard firebox M390 Watchguard firebox M395 Watchguard firebox M440 Watchguard firebox M4600 Watchguard firebox M470 Watchguard firebox M4800 Watchguard firebox M495 Watchguard firebox M570 Watchguard firebox M590 Watchguard firebox M595 Watchguard firebox M670 Watchguard firebox M690 Watchguard firebox M695 Watchguard firebox Nv5 Watchguard firebox T115-w Watchguard firebox T125 Watchguard firebox T125-w Watchguard firebox T145 Watchguard firebox T145-w Watchguard firebox T15 Watchguard firebox T185 Watchguard firebox T20 Watchguard firebox T25 Watchguard firebox T35 Watchguard firebox T40 Watchguard firebox T45 Watchguard firebox T55 Watchguard firebox T70 Watchguard firebox T80 Watchguard firebox T85 Watchguard fireboxv Watchguard fireware |
|
| CPEs | cpe:2.3:a:watchguard:firebox_cloud:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:11.12.4:-:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:11.12.4:u1:*:*:*:*:*:* |
|
| Vendors & Products |
Watchguard firebox Cloud
Watchguard firebox M270 Watchguard firebox M290 Watchguard firebox M295 Watchguard firebox M370 Watchguard firebox M390 Watchguard firebox M395 Watchguard firebox M440 Watchguard firebox M4600 Watchguard firebox M470 Watchguard firebox M4800 Watchguard firebox M495 Watchguard firebox M570 Watchguard firebox M590 Watchguard firebox M595 Watchguard firebox M670 Watchguard firebox M690 Watchguard firebox M695 Watchguard firebox Nv5 Watchguard firebox T115-w Watchguard firebox T125 Watchguard firebox T125-w Watchguard firebox T145 Watchguard firebox T145-w Watchguard firebox T15 Watchguard firebox T185 Watchguard firebox T20 Watchguard firebox T25 Watchguard firebox T35 Watchguard firebox T40 Watchguard firebox T45 Watchguard firebox T55 Watchguard firebox T70 Watchguard firebox T80 Watchguard firebox T85 Watchguard fireboxv Watchguard fireware |
|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2. | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image. |
| CPEs | cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.0 cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.5 cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:2025.1 |
cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:* |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2. | |
| Title | WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS | |
| First Time appeared |
Watchguard
Watchguard fireware Os |
|
| Weaknesses | CWE-347 | |
| CPEs | cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:11.0 cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.0 cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.5 cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:2025.1 |
|
| Vendors & Products |
Watchguard
Watchguard fireware Os |
|
| References |
| |
| Metrics |
cvssV4_0
|