Fireware Updates Available: Upgrade Your Firebox Firmware Now

For a consistent, strong security posture, it’s more important than ever to quickly update all cybersecurity infrastructure with the latest firmware and up-to-date patches. Therefore, we recommend that you upgrade your Fireboxes now to apply the latest security fixes.  The following new versions are now available to download from the WatchGuard Software Downloads Center, WatchGuard Cloud, or the Firebox Web UI.  You should immediately update your Firebox appliance(s) to one of these versions or higher (if available):

• Fireware 2025.1.1
• Fireware v12.11.4
• Fireware v12.5.13
• Fireware v12.3.1 Update 3

This firmware includes a fix for a critical security flaw we discovered through our ongoing internal programs to test the security of our products. We have not seen any indication that this vulnerability has been exploited. After discovery and validation, WatchGuard filed CVE-2025-9242 according to our responsible disclosure process and we have issued WatchGuard Security Advisory WGSA-2025-0015 and posted it to our PSIRT page. 

At WatchGuard, we embrace a responsible disclosure process as essential to keeping customers knowledgeable about the cybersecurity products they use. In circumstances when the vulnerability is unexploited, and when certain details could speed exploitation attempts, we may delay including them in the security advisory to reduce exposure and protect our customers. After a reasonable time to apply patches with upgraded firmware, we will then add indicators of attack (IoAs) and additional information. 

Which products are affected by this release?

• Fireware 2025.1.1 for Firebox T115-W, T125, T125-W, T145, T145-W, and T185
• Fireware 12.11.4 for Firebox NV5, T20, T25, T20, T45, T55, T70, T80, T85-PoE, M270, M290, M370, M390, M470, M570, M590, M670, M690, M4600, M4800, M5600, M5800, FireboxV, and Firebox Cloud
• 12.5.13 : for Firebox T15 and T35
• 12.3.1 Update 3 for Fireboxes running in FIPS mode under FIPS140-2. Applicable models are Firebox T15, T35, T55, T70, M270, M370, M470, M570, M670, M4600, and M5600

If you have any further questions, please contact  WatchGuard Support or your WatchGuard account representative.