High severity · published Jun 23, 2022
CVE-2022-2147
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Warp · Cloudflare
2022.2.95.0 before 2022.3.186.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-2147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-2147
Release Notes
https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r
More from Warp
9.8
CVE-2022-3320
Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
8.8
CVE-2022-3512
Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
8.5
CVE-2022-3337
Lock WARP switch bypass by removing VPN profile on iOS mobile client
8.2
CVE-2022-3321
Lock WARP switch feature bypass on WARP mobile client for iOS
8.0
CVE-2022-4428
support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the…