CVE-2025-1549
Medium
Description
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
SeverityMedium
CVSS6.3
Exploit probability—
ProductMobile VPN with SSL Client
PublishedOct 29, 2025
First seenOct 29, 2025
Weakness typeCWE-77Command injection
How to fix
Update
- WatchGuard Mobile VPN with SSL Client12.11.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WatchGuard Mobile VPN with SSL Client | 12.0 ≤ v < 12.11.3 | 12.11.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.