CVE-2025-2781
Medium
Description
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.
SeverityMedium
CVSS6.3
Exploit probability—
ProductMobile VPN with SSL Client
PublishedMar 28, 2025
First seenMar 28, 2025
Weakness typeCWE-276CWE-276
How to fix
Update
- WatchGuard Mobile VPN with SSL Client12.11.2 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WatchGuard Mobile VPN with SSL Client | 11.0 ≤ v < 12.11.2 | 12.11.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.