CVE-2022-2147

MEDIUM

6.5

Description

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionREQUIRED

Published6/23/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

cloudflare:warp

Weaknesses (CWE)

CWE-428CWE-428

References

https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r(cna@cloudflare.com)

https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.