CVE-2023-35863 Race condition in n/a
An unprivileged application can race the service to access the driver, potentially leading to privilege escalation or code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-35863?
CVE-2023-35863 is a medium-severity vulnerability in n/a, published on 5 Jul 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.
Weakness: CWE-362
Which versions are affected by CVE-2023-35863?
It affects 1 product.
Products include Madefornet Http Debugger.
How do I fix CVE-2023-35863?
No fix has been published for CVE-2023-35863 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-35863 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-35863 exists.
Sources
Also known as GHSA-6634-g827-cg9w.