PT-2025-49167
CVE-2025-1910
·
Published
2025-05-28
·
Updated
2026-09-25
Description by
CVSS 2.0
6.8
MediumMetricsAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
WatchGuard Mobile VPN with SSL Client versions 12.0 through 12.11.2
Description
The WatchGuard Mobile VPN with SSL Client on Windows contains a flaw due to insufficient input validation at the control level. This allows a locally authenticated user without administrative rights to escalate their privileges to NT AUTHORITY/SYSTEM on the machine where the client is installed.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾