What’s Vulnerable › Vulnerabilities

CVE-2024-4944: Mobile VPN with SSL Local Privilege Escalation Vulnerability

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-09 · updated 2026-08-07
• Weakness: CWE-77

Description

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.

Affected products

• WatchGuard Mobile VPN with SSL Client: before 12.10.4 — fixed in 12.10.4

How to fix

Upgrade to a fixed version: WatchGuard Mobile VPN with SSL Client 12.10.4. Check the vendor advisory for mitigations.

References

• https://psirt.watchguard.com/CVE-2024-4944
• https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00010
• https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00010

Get alerted when CVE-2024-4944 or the next vulnerability affects your stack