CVE-2025-1910
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative user to escalate privileges to NT AUTHORITY/SYSTEM on the machine where the VPN client is installed.
Risk Assessment
A local attacker could gain full control of the Windows system, potentially leading to data theft, malware installation, or permanent system takeover.
Recommendation
Install the latest version of the WatchGuard Mobile VPN with SSL Client and restrict local access to systems where it is installed.
Other vulnerabilities in WatchGuard Mobile VPN with SSL Client
See all- CVE-2025-2781Medium
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges.
- CVE-2024-4944High
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows allows a local user to execute arbitrary commands with elevated privileges.
Original NVD description (English source)
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.