Vulnerability · Published Dec 4, 2025 · Assigned by WatchGuard
CVE-2025-1910WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
Medium 6.3
In plain English
A medium-severity command injection in Mobile VPN with SSL Client from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 4.0)6.3Medium
Exploit odds (30 days)0.3%top 79.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | Mobile VPN with SSL Client | 11.0 – before 12.11.3 |
Weakness: CWE-77 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H