Local Privilege Escalation Vulnerability Affects WatchGuard Mobile VPN
CVE-2024-4944

8.6HIGH

Key Information:

Vendor

Watchguard

Status
Mobile Vpn With Ssl Client
Vendor
CVE Published:
9 July 2024

Badges

👾 Exploit Exists

What is CVE-2024-4944?

A local privilege escalation vulnerability exists in the WatchGuard Mobile VPN with SSL client for Windows. This security flaw allows a local user to gain elevated privileges, enabling the execution of arbitrary commands on the affected system. This can lead to unauthorized access and potential compromise of sensitive data or system integrity. Users of the affected product should apply necessary updates to mitigate this vulnerability and protect their systems from potential exploits.

Affected Version(s)

Mobile VPN with SSL Client 12.0 < 12.10.4

References

https://psirt.watchguard.com/CVE-2024-4944
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-...
vendor-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.