Vulnerability Details : CVE-2023-35838
Potential exploit
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.
Products affected by CVE-2023-35838
- cpe:2.3:a:wireguard:wireguard:0.5.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-35838
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 11 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-35838
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.7
|
MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
2.1
|
3.6
|
NIST |
CWE ids for CVE-2023-35838
-
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-35838
-
https://tunnelcrack.mathyvanhoef.com/details.html
TunnelCrack: Widespread design flaws in VPN clientsExploit;Third Party Advisory
-
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015
Security Advisory
-
https://wireguard.com
WireGuard: fast, modern, secure VPN tunnelProduct
Jump to