WatchGuard Mobile VPN with SSL Client vulnerabilities

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative user to escalate privileges to NT AUTHORITY/SYSTEM on the machine where the VPN client is installed.

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges.

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows allows a local user to execute arbitrary commands with elevated privileges.