CVE-2025-2781

MediumCVSS 6.3/10Last modified Aug 8, 2026

Description

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.

Metrics

CVSS 4.0 6.3/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2025
Last modified
Aug 8, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-278104.8Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory CVE-2025-278117.8A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escaCVE-2025-278128.1MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.CVE-2025-278138.1MSI Center before 2.0.52.0 has Missing PE Signature Validation.CVE-2025-278169.8A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecurCVE-2025-278177.5A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration CVE-2025-278188.8A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or KafCVE-2025-278197.5In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not oCVE-2025-27826.3The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directorCVE-2025-278207.5A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. DisCVE-2025-278217.3Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users arCVE-2025-278227.5An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user a