Vulnerability · Published Oct 29, 2025 · Assigned by WatchGuard

CVE-2025-1549WatchGuard Mobile VPN with SSL Local Privilege Escallation

Medium 6.3

In plain English

A medium-severity command injection in Mobile VPN with SSL Client from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 4.0)6.3Medium

Exploit odds (30 days)0.2%top 95.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5

Affected products (as reported)

Vendor	Product	Versions
WatchGuard	Mobile VPN with SSL Client	12.0 – before 12.11.3

Weakness: CWE-77 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

References

https://psirt.watchguard.com/CVE-2025-1549 vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00016 vendor-advisory