What is GHSA-pw6w-rvw4-j57r?

GHSA-pw6w-rvw4-j57r is a security advisory published by GitHub Security Advisories with Medium severity. An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an...

Which CVE IDs does GHSA-pw6w-rvw4-j57r cover?

GHSA-pw6w-rvw4-j57r covers the following CVE IDs: CVE-2025-13940. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pw6w-rvw4-j57r?

GHSA-pw6w-rvw4-j57r has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-pw6w-rvw4-j57rMediumCVSS 5.5

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an...

Vendor

GitHub Security Advisories

Published

December 5, 2025

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2025-13940 →

📋 Description

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand system integrity check in the Fireware Web UI will correctly show a failed system integrity check message in the event of a failure.This issue affects Fireware OS: from 12.8.1 through 12.11.4, from 2025.1 through 2025.1.2.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-13940
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026
https://psirt.watchguard.com/CVE-2025-13940
https://github.com/advisories/GHSA-pw6w-rvw4-j57r