CVE-2020-35152CWE-428

Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows

Medium · published February 2, 2021

CVSS v3.1
4.5
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2021-02-02T23:35Z
EPSS history
Timeline
  • 02 FEB 23:35Z
    Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
    cvelistv5