How severe is CVE-2025-4106?

CVE-2025-4106 has a CVSS 4.0 base score of 8.9, rated high severity.

Is CVE-2025-4106 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-4106?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-4106 have an EU (EUVD) identifier?

Yes. CVE-2025-4106 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-35898.

When was CVE-2025-4106 published?

CVE-2025-4106 was published on 2025-10-24 and last updated on 2026-06-17.

CVE-2025-4106

CVE-2025-4106 is a high-severity vulnerability with a CVSS 4.0 base score of 8.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-489.

Key facts

Severity: High (CVSS 4.0 base score 8.9)
EPSS exploit prediction: 0% (21st percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-35898
Weakness: CWE-489
Published: 2025-10-24
Last modified: 2026-06-17

Description

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command. This issue affects Fireware OS: from 12.0 before 12.11.2.

Frequently asked questions

What is CVE-2025-4106?: An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command. This issue affects Fireware OS: from 12.0 before 12.11.2.
How severe is CVE-2025-4106?: CVE-2025-4106 has a CVSS 4.0 base score of 8.9, rated high severity.
Is CVE-2025-4106 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-4106?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-4106 have an EU (EUVD) identifier?: Yes. CVE-2025-4106 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-35898.
When was CVE-2025-4106 published?: CVE-2025-4106 was published on 2025-10-24 and last updated on 2026-06-17.

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00010

Other CWE-489 vulnerabilities

CVE-2023-4804 — Critical (CVSS 10.0): An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
CVE-2026-49188 — Critical (CVSS 9.8): The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way…
CVE-2024-46873 — Critical (CVSS 9.8): Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root…
CVE-2024-21785 — Critical (CVSS 9.8): A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E…
CVE-2024-32047 — Critical (CVSS 9.8): Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might…
CVE-2024-28008 — Critical (CVSS 9.8): Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP,…

Browse all CWE-489 vulnerabilities →