5 results · Feed
-
High 7.2
Command Injection in WireGuard VPN
Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
-
High 7.6CVE-2024-3661 Public exploit
DHCP routing options can manipulate interface-based VPN traffic
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …
-
Medium 5.7
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a lo…
-
Unscored —
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the…
-
Medium 5.3
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be ab…