title: Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
description: The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over an IPv6-capable network, te WARP client did not assign loopback IPv6 addresses but Unique Local Addresses, which under certain conditions could point towards unknown devices in the same local network which enables an Attacker to view DNS queries made by the device.
problem types: CWE-319 Cleartext Transmission of Sensitive Information
affected:
{
defaultStatus: affected
modules: Client
packageName: WARP Client
platforms: Windows
product: WARP
vendor: Cloudflare
versions:
changes: [at: 2023.7.160.0, status: unaffected], lessThan: 2023.7.160.0, status: affected, version: 0, versionType: release
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Users are encouraged to update to the latest WARP Client (Windows) version available: 2023.7.160.0
workarounds: Disabling IPv6 support in local devices