Vulnerability in Watchguard Sso Terminal Services Agent
CVE-2025-2782
The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.
EPSS: 0.001 (3.3th percentile) — read the EPSS interpretation.
Affected products
- Watchguard Sso Terminal Services Agent — versions 12.0
- Watchguard Terminal Services Agent — versions 12.0
Weakness classification (CWE)
References
- 5d1c2695-1a31-4499-88ae-e847036fd7e3
- 5d1c2695-1a31-4499-88ae-e847036fd7e3 (vendor-advisory)