WatchGuard Mobile VPN with SSL Client Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the WatchGuard Mobile VPN with SSL Client for Windows, specifically in versions 11.0 through 12.11. The issue arises because the application does not correctly set directory permissions when installed in a non-default location. This flaw could enable an authenticated local attacker to gain SYSTEM privileges on the affected machine.

Impact

Exploitation of this vulnerability could allow an authenticated local attacker to escalate privileges to the SYSTEM level on the affected Windows system.

Remediation

Users can upgrade to WatchGuard Mobile VPN with SSL Client version 12.11.2 to address this vulnerability.