RCE in Watchguard Mobile Vpn With SSL Client
CVE-2025-1549
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.
Affected products
- Watchguard Mobile Vpn With Ssl Client — versions 12.0
Weakness classification (CWE)
References
- 5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)
- 5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)