CVE-2021-46873

—

CVSS 3.1

5.3 medium

EPSS

<1%p39

Published

Jan 29, 2023 (Jan 29, 2023)

Modified

Jun 17, 2026

Description

WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless.

Vendors: wireguard
Products: wireguard
Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.