PT-2025-49167 · Watchguard · Watchguard Mobile Vpn With Ssl Client

·

CVE-2025-1910

·

Published

2025-05-28

·

Updated

2026-08-08

CVSS v2.0

6.8

Medium

VectorAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL Client versions 12.0 through 12.11.2
Description The WatchGuard Mobile VPN with SSL Client on Windows contains a flaw due to insufficient input validation at the control level. This allows a locally authenticated user without administrative rights to escalate their privileges to NT AUTHORITY/SYSTEM on the machine where the client is installed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-15562
CVE-2025-1910

Affected Products

Watchguard Mobile Vpn With Ssl Client