CVE-2023-35863

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver

published July 5, 2023

CVSS
—
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.5th percentile
Published
2023-07-05T00:00Z
EPSS history
Timeline
  • 05 JUL 00:00Z
    In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver
    cvelistv5