WatchGuard Mobile VPN with SSL Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in WatchGuard Mobile VPN with SSL client for Windows, prior to version 12.10.2. This vulnerability allows a local user to execute arbitrary commands with elevated privileges on the Windows system. It also serves as an additional unmitigated attack path for CVE-2024-4944.

Impact

Exploitation of this vulnerability allows local users to gain elevated privileges, enabling them to execute arbitrary commands with higher rights on the affected Windows system.

Remediation

Users can upgrade to WatchGuard Mobile VPN with SSL for Windows version 12.11.3 to address this vulnerability.