WatchGuard Firebox Fireware OS Boot Time System Integrity Check Bypass Vulnerability

A vulnerability in WatchGuard Fireware OS allows an attacker to bypass the boot time system integrity check on Firebox devices. This bypass can prevent the Firebox from shutting down when a system integrity check failure occurs. Although the on-demand system integrity check in the Fireware Web UI correctly reports a failure, this vulnerability disrupts the automatic response to such failures. The issue affects Fireware OS versions 12.8.1 through 12.11.4 and 2025.1 through 2025.1.2.

Impact

Exploiting this vulnerability can lead to a failure in the system's integrity management, allowing potential undetected issues to persist without automatic shutdowns, which could be critical in maintaining system security and reliability.

Remediation

Users can upgrade to Fireware OS 2025.1.3 or 12.11.5 to address this vulnerability.