CVE-2025-2781: falha de média gravidade em WatchGuard Mobile VPN with SSL Client
WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.1%
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H
Produtos afetados
WatchGuard · Mobile VPN with SSL ClientCVEs relacionadas — WatchGuard Mobile VPN with SSL Client
No mesmo produto, das mais perigosas para as menos.
CVE-2024-4944HIGHMobile VPN with SSL Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2025-1910MEDIUMWatchGuard Mobile VPN with SSL Local Privilege Escalation via Update PackageEPSS 0.3%CVE-2025-1549MEDIUMWatchGuard Mobile VPN with SSL Local Privilege EscallationEPSS 0.2%CVE-2026-13079HIGHWatchGuard Mobile VPN with SSL Windows Client Local Privilege EscalationEPSS 0.1%CVE-2026-115495MEDIUMMobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketEPSS 0.1%