Description
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.





This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
Published: 2025-10-29
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 26 Feb 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 04 Dec 2025 22:30:00 +0000

Type Values Removed Values Added
Description A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.3 A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
First Time appeared Watchguard mobile Vpn With Ssl Client
CPEs cpe:2.3:a:watchguard:mobile_vpn_with_ssl_client:*:*:*:*:*:*:*:12.0
Vendors & Products Watchguard mobile Vpn With Ssl Client

Thu, 30 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft windows
Watchguard
Watchguard mobile Vpn With Ssl
Vendors & Products Microsoft
Microsoft windows
Watchguard
Watchguard mobile Vpn With Ssl

Wed, 29 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 29 Oct 2025 17:00:00 +0000

Type Values Removed Values Added
Description A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.3
Title WatchGuard Mobile VPN with SSL Local Privilege Escallation
Weaknesses CWE-77
References
Metrics cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H'}

Subscriptions

Microsoft Windows
Watchguard Mobile Vpn With Ssl Mobile Vpn With Ssl Client
cve-icon MITRE

Status: PUBLISHED

Assigner: WatchGuard

Published:

Updated: 2026-02-26T16:57:01.027Z

Reserved: 2025-02-21T11:02:04.461Z

Link: CVE-2025-1549

cve-icon Vulnrichment

Updated: 2025-10-29T17:50:31.528Z

cve-icon NVD

Status : Deferred

Published: 2025-10-29T17:15:35.543

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-1549

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-10-30T14:37:52Z

Weaknesses