CVE-2025-2781CWE-276

CVE-2025-2781

published March 29, 2025

CVSS
6.3
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00139 · 3.0th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-03-29T03:15Z
References (2)
https://psirt.watchguard.com/CVE-2025-2781 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 28 MAR 22:23Z
    WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory
    cvelistv5