CVE-2025-2781
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges.
Risk Assessment
A local attacker could gain full control of the system, potentially leading to data theft, malware installation, or permanent system takeover.
Recommendation
Install the latest version of the WatchGuard Mobile VPN with SSL Client and ensure directory permissions are correctly configured.
Other vulnerabilities in WatchGuard Mobile VPN with SSL Client
See all- CVE-2025-1910Medium
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative user to escalate privileges to NT AUTHORITY/SYSTEM on the machine where the VPN client is installed.
- CVE-2024-4944High
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows allows a local user to execute arbitrary commands with elevated privileges.
Original NVD description (English source)
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.