CVE-2023-35838

CVE-2023-35838 describes a vulnerability in the WireGuard client 0.5.3 on Windows, where its insecure configuration of the operating system and firewall blocks traffic to local networks using non-RFC1918 IP addresses. This allows an attacker to trick a user into blocking IP traffic to specific services or addresses, even when the VPN is active. Rated as Medium severity (CVSS 5.7), it requires user interaction and network access for exploitation, primarily impacting availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness.