Medium severity · published Mar 28, 2025
CVE-2025-2782
WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
SSO Terminal Services Agent · WatchGuard
12.0 before 12.11.2 · source: vendor