CVE-2024-4944
published 2024-07-09CVE-2024-4944: A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.33%
26.7th percentile
A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| watchguard | mobile_vpn_with_ssl | < 12.10.4 | 12.10.4 |
| watchguard | mobile_vpn_with_ssl_client | >= 12.0 < 12.11.3 | 12.11.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.6HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
WatchGuard Mobile VPN with SSL Client up to 12.10 on Windows command injection (wgsa-2024-0001)
vuldb·2026-05-04·CVSS 7.8
CVE-2024-4944 [HIGH] WatchGuard Mobile VPN with SSL Client up to 12.10 on Windows command injection (wgsa-2024-0001)
A vulnerability labeled as critical has been found in WatchGuard Mobile VPN with SSL Client up to 12.10 on Windows. This impacts an unknown function. Executing a manipulation can lead to command injection.
This vulnerability is tracked as CVE-2024-4944. The attack is restricted to local execution. No exploit exists.
The affected component should be upgraded.
GHSA
GHSA-p8x8-q3xw-3gv4: A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands
ghsa_unreviewed·2025-10-29·CVSS 7.8
CVE-2025-1549 [HIGH] CWE-77 GHSA-p8x8-q3xw-3gv4: A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.
This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.3
GHSA
GHSA-cfxc-ch9m-pr95: A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands w
ghsa_unreviewed·2024-07-09
CVE-2024-4944 [HIGH] CWE-77 GHSA-cfxc-ch9m-pr95: A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands w
A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-09
Published