CVE-2024-4944#

Mobile VPN with SSL Local Privilege Escalation Vulnerability

High 8.6 CVSS v4.0 › Published 2024-07-09Updated 2026-08-07

Summary #

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.

Product status #

Product	Affected	Not affected
Mobile VPN with SSL Client	>= 12.0, < 12.10.4	>= 12.10.4

Weakness Type and Impact #

CWECWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPECCAPEC-233Privilege Escalation

Exploitation Status #

WatchGuard is not aware of any active exploitation of this vulnerability.

Solution #

Mobile VPN with SSL Client 12.10.4

References #

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00010

Credits #

Defence Tech Malware Lab finder