CVE-2025-1910mediumCWE-77

CVE-2025-1910: falha de média gravidade em WatchGuard Mobile VPN with SSL Client

WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Mobile VPN with SSL Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Produtos afetados
WatchGuard · Mobile VPN with SSL Client
CVEs relacionadas — WatchGuard Mobile VPN with SSL Client

No mesmo produto, das mais perigosas para as menos.

CVE-2024-4944HIGHMobile VPN with SSL Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2025-1549MEDIUMWatchGuard Mobile VPN with SSL Local Privilege EscallationEPSS 0.2%CVE-2026-13079HIGHWatchGuard Mobile VPN with SSL Windows Client Local Privilege EscalationEPSS 0.1%CVE-2025-2781MEDIUMWatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation DirectoryEPSS 0.1%CVE-2026-115495MEDIUMMobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketEPSS 0.1%