CVE-2022-2147 Unquoted Service Path in Cloudflare WARP for Windows
HighCVSS 7.8
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudflare WARP | >= 2022.2.95.0 | No fix listed |
| cloudflare WARP | < 2022.3.186.0 | 2022.3.186.0 |
| cloudflare WARP | >= 2022.2.95.0, < 2022.3.186.0 | 2022.3.186.0 |
References
- github.com release-notes third-party-advisory