PT-2025-49167 · Watchguard · Watchguard Mobile Vpn With Ssl Client

Akasec · Published 2025-05-28 · Updated 2026-01-08 · CVE-2025-1910

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL Client versions 12.0 through 12.11.2

Description A locally authenticated, non-administrative Windows user can elevate their privileges to NT AUTHORITY/SYSTEM on a Windows machine where the VPN Client is installed.

Recommendations Update WatchGuard Mobile VPN with SSL Client to a version newer than 12.11.2.

Fix

LPE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-15562

CVE-2025-1910

Affected Products

Watchguard Mobile Vpn With Ssl Client

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-1910 · Security Note
• https://bdu.fstec.ru/vul/2025-15562 · Security Note
• https://watchguard.com/de/wgrd-psirt/advisory/wgsa-2025-00008 · Note
• https://t.me/CVEtracker/38870 · Telegram Post
• https://watchguard.com/help/docs/help-center/en-US/content/en-us/Fireware/mvpn/ssl/mvpn_ssl_client-install_c.html · Note
• https://twitter.com/TheExploitLab/status/2009246788260385109 · Twitter Post
• https://twitter.com/CVEnew/status/1996704774792585439 · Twitter Post
• https://watchguard.com/wgrd-psirt/advisory/wgsa-2025-00008 · Note