CVE-2023-1862

CVSS Score of 10 (low)

Details

Published Jun 20, 2023
Updated: Jun 29, 2023
CWE ID 284

Summary

CVE-2023-1862 is a vulnerability in the Cloudflare WARP client for Windows, up to version v2023.3.381.0. It allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This vulnerability could be exploited by an attacker to trigger WARP connect and disconnect commands, as well as obtain network diagnostics and application configuration from the target device. However, exploiting this vulnerability requires certain conditions to be met, such as the target device being reachable on port 445 and allowing authentication with NULL sessions or having knowledge of the target's credentials. The potential danger posed by this vulnerability is rated as high severity, with a base score of 7.3 out of 10. It is advised that organizations using affected versions of the Cloudflare WARP client for Windows update to a patched version or apply any recommended mitigations to prevent potential exploitation of this vulnerability.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-1862 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options