Read the docs
TI-2023-02579 Aliases CVE-2023-2754

Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client

Priority LOW 36CWE-319Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-319.

Summary

The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses but Unique Local Addresses, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker to view DNS queries made by the device.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0092 60th percentileScored 2026-11-07
Fix Fixed WARP (Cloudflare): 2023.7.160.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CloudflareWARPbefore 2023.7.160.02023.7.160.0Patch availableCNA
  • WARP VendorCloudflare Affected before 2023.7.160.0 Fixed in 2023.7.160.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:*before 2023.7.160.0VulnerableCloudflare
  • cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:* Versions before 2023.7.160.0 Vulnerable ·Cloudflare

Remediation

  • Fix · CNA WARP (Cloudflare) Fixed in 2023.7.160.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-2754

References

Advisory 1

Other 2

  • TI-2022-04046 support_uri validation missing in WARP client for Windows CVSS 3.1HIGH 8.9
  • TI-2022-03068 Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command CVSS 3.1CRITICAL 9.8
  • TI-2023-01749 Remote access to warp-svc.exe in Cloudflare WARP CVSS 3.1HIGH 7.3
  • TI-2022-03240 Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command CVSS 3.1HIGH 8.8
  • TI-2023-01335 Local Privilege Escalation Vulnerability in WARP's MSI Installer CVSS 3.1HIGH 7.8
  • TI-2023-00618 Local Privilege Escalation in Cloudflare WARP Installer (Windows) CVSS 3.1HIGH 7.8
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences