Description
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.





This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
Published: 2025-10-29
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 26 Feb 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 04 Dec 2025 22:30:00 +0000

Type Values Removed Values Added
Description A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.3 A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
First Time appeared Watchguard mobile Vpn With Ssl Client
CPEs cpe:2.3:a:watchguard:mobile_vpn_with_ssl_client:*:*:*:*:*:*:*:12.0
Vendors & Products Watchguard mobile Vpn With Ssl Client

Thu, 30 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft windows
Watchguard
Watchguard mobile Vpn With Ssl
Vendors & Products Microsoft
Microsoft windows
Watchguard
Watchguard mobile Vpn With Ssl

Wed, 29 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 29 Oct 2025 17:00:00 +0000

Type Values Removed Values Added
Description A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.3
Title WatchGuard Mobile VPN with SSL Local Privilege Escallation
Weaknesses CWE-77
References
Metrics cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H'}

Subscriptions

Microsoft Windows
Watchguard Mobile Vpn With Ssl Mobile Vpn With Ssl Client
cve-icon MITRE

Status: PUBLISHED

Assigner: WatchGuard

Published:

Updated: 2026-02-26T16:57:01.027Z

Reserved: 2025-02-21T11:02:04.461Z

Link: CVE-2025-1549

cve-icon Vulnrichment

Updated: 2025-10-29T17:50:31.528Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-29T17:15:35.543

Modified: 2025-12-04T23:15:46.757

Link: CVE-2025-1549

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-10-30T14:37:52Z

Weaknesses