CVE-2023-1862

Summary

CVE-2023-1862 is a vulnerability in the Cloudflare WARP client for Windows, up to version v2023.3.381.0. It allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This vulnerability could be exploited by an attacker to trigger WARP connect and disconnect commands, as well as obtain network diagnostics and application configuration from the target device. However, exploiting this vulnerability requires certain conditions to be met, such as the target device being reachable on port 445 and allowing authentication with NULL sessions or having knowledge of the target's credentials. The potential danger posed by this vulnerability is rated as high severity, with a base score of 7.3 out of 10. It is advised that organizations using affected versions of the Cloudflare WARP client for Windows update to a patched version or apply any recommended mitigations to prevent potential exploitation of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.