Diagnostic Shell Vulnerability in Firebox Fireware OS by WatchGuard

CVE-2025-4106

What is CVE-2025-4106?

An issue exists where an authenticated admin user, with access to both the management WebUI and command line interface on a Firebox device, can exploit a flaw to enable a diagnostic debug shell. This can be accomplished by uploading a platform and version-specific diagnostic package and executing a previously unused diagnostic command. This vulnerability potentially allows for unauthorized access to sensitive system details and operations, raising concerns over the security integrity of the affected Fireware OS versions.

References