CVE-2025-2782CWE-276

CVE-2025-2782

published March 29, 2025

CVSS
6.3
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-03-29T03:15Z
References (2)
https://psirt.watchguard.com/CVE-2025-2782 · 5d1c2695-1a31-4499-88ae-e847036fd7e3https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00005 · 5d1c2695-1a31-4499-88ae-e847036fd7e3
EPSS history
Timeline
  • 28 MAR 22:24Z
    WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory
    cvelistv5