CyberRota Analysis
AI-GeneratedWireGuard Easy versions up to 15.3.0 are vulnerable due to a weak one-time link token generation mechanism, allowing unauthenticated attackers to brute-force peer credentials with a limited keyspace. This critical vulnerability enables attackers to impersonate VPN peers by recovering their PrivateKey and PresharedKey through an unauthenticated endpoint that lacks rate limiting and proper token validation. Organizations using affected versions should prioritize immediate updates to mitigate the risk of credential compromise and potential network breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate candidate tokens against the unauthenticated /cnf/:oneTimeLink route, which lacks rate limiting and does not validate token expiration, to obtain a peer's PrivateKey and PresharedKey and impersonate that peer on the VPN network.