CVE-2024-4944
Mobile VPN with SSL Local Privilege Escalation Vulnerability
CVE-2024-4944: Mobile VPN with SSL Local Privilege Escalation Vulnerability. Not in the CISA KEV catalog. High advisory severity (CVSS 8.6, WatchGuard).
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Get an email when WatchGuard publishes the next one.
VulniPulse checks WatchGuard's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
CVE-2024-4944 key facts
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- High
- CVSS base score
- 8.6 (WatchGuard)
- Fixed releases
- WatchGuard: 12.10.4
- Vendor advisories
- 2 from WatchGuard
- VulniPulse record
- Published · Updated
Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2024-4944; bulletin-wide values are not repeated here.
Is CVE-2024-4944 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2024-4944 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2024-4944?
Upgrade to a fixed release named by the vendor:
- WatchGuard: 12.10.4
Vendor advisory comparison
WatchGuard
2 advisories- Advisory severityHigh8.6
High [CVE-2024-4944] Mobile VPN with SSL Local Privilege Escalation Vulnerability
CVE-2024-4944Source published Source updated
A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.
- Affected products in this advisory
- Mobile VPN with SSL Client
- Source-reported affected versions
- Mobile VPN with SSL Client 12.0 before 12.10.4
- Source-reported fixed versions
- 12.10.4
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Advisory severityMedium6.3
Medium [CVE-2024-4944 +1] WatchGuard Mobile VPN with SSL Local Privilege Escallation
CVE-2025-1549Source published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
- Affected products in this advisory
- Mobile VPN with SSL Client
- Source-reported affected versions
- Mobile VPN with SSL Client 12.0 before 12.11.3
- Source-reported fixed versions
- 12.11.3
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
More WatchGuard advisories
- CVE-2026-115495Oct 27, 2026Mobile VPN with SSL Client information disclosure
- CVE-2026-13079Jul 3, 2026local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client
- CVE-2025-1910Dec 4, 2025WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
- CVE-2025-1549Oct 29, 2025WatchGuard Mobile VPN with SSL Local Privilege Escallation
- CVE-2025-2781Mar 28, 2025WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation
- CVE-2026-90465Oct 27, 2026Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
Follow CVE-2024-4944 in the free weekly digest
Every Monday: whether it was added to CISA KEV, reported exploited, got a fix or changed severity, plus the week's critical and high advisories.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future WatchGuard CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.