high7.8
CVE-2023-35841
Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmwa…
Impact
Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixtech | Winflash | before 4.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
- https://jvn.jp/en/vu/JVNVU93886750/index.html
- https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/
- https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
- https://jvn.jp/en/vu/JVNVU93886750/index.html
- https://www.phoenix.com/security-notifications/cve-2023-35841/