Firebox and Fireware OS
CVE-2025-1549: WatchGuard Mobile VPN with SSL Local Privilege Escallation
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Mobile VPN with SSL Client 12.0 | 12.11.3 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.
This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
Exploitation
WatchGuard is not aware of any exploitation of this vulnerability in the wild.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.