CVE-2022-3512: Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-3512?
CVE-2022-3512 is a vulnerability in Cloudflare Warp that allows a user to bypass the "Lock WARP switch" feature and not enforce Zero Trust policies on an affected endpoint.
How does CVE-2022-3512 impact Cloudflare Warp on Windows?
CVE-2022-3512 impacts Cloudflare Warp on Windows by allowing a user to disconnect the WARP client and bypass the "Lock WARP switch" feature.
How does CVE-2022-3512 impact Cloudflare Warp on macOS?
CVE-2022-3512 impacts Cloudflare Warp on macOS by allowing a user to disconnect the WARP client and bypass the "Lock WARP switch" feature.
How does CVE-2022-3512 impact Cloudflare Warp on Linux Kernel?
CVE-2022-3512 impacts Cloudflare Warp on Linux Kernel by allowing a user to disconnect the WARP client and bypass the "Lock WARP switch" feature.
What is the severity of CVE-2022-3512?
CVE-2022-3512 has a severity rating of 8.8 (high).
How can I fix CVE-2022-3512?
Cloudflare has released an update to address CVE-2022-3512. Users should update their Warp clients to the latest version.