Local Privilege Escalation Vulnerability Affects WatchGuard Mobile VPN
CVE-2024-4944

7.8HIGH

Key Information:

Vendor
Watchguard
Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
9 July 2024

Summary

A local privilege escalation vulnerability exists in the WatchGuard Mobile VPN with SSL client for Windows. This security flaw allows a local user to gain elevated privileges, enabling the execution of arbitrary commands on the affected system. This can lead to unauthorized access and potential compromise of sensitive data or system integrity. Users of the affected product should apply necessary updates to mitigate this vulnerability and protect their systems from potential exploits.

Affected Version(s)

Mobile VPN with SSL Client Windows 0 <= 12.10

References

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.