This vulnerability in WatchGuard Fireware OS enables an attacker with high privileges to bypass the operating system's filesystem integrity verification mechanism. By crafting a malicious firmware update package, the attacker can maintain limited persistence on the device. The issue is classified under CWE-440, indicating improper restriction of operations or permissions. The CVSS 4.0 base score is 6.9, reflecting a medium severity with network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability.

An attacker with high privileges can bypass filesystem integrity checks and maintain limited persistence on the affected Fireware OS device. This could allow unauthorized modifications to the system firmware, potentially undermining system security and stability. However, the impact is limited to integrity and availability, with no confidentiality impact reported. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor WatchGuard's advisories for updates. Until a fix is available, restrict access to high privilege accounts and carefully validate firmware update sources to reduce risk.