Diagnostic Shell Vulnerability in Firebox Fireware OS by WatchGuard

CVE-2025-4106

What is CVE-2025-4106?

An issue exists where an authenticated admin user, with access to both the management WebUI and command line interface on a Firebox device, can exploit a flaw to enable a diagnostic debug shell. This can be accomplished by uploading a platform and version-specific diagnostic package and executing a previously unused diagnostic command. This vulnerability potentially allows for unauthorized access to sensitive system details and operations, raising concerns over the security integrity of the affected Fireware OS versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References