CVE-2023-35863

2023-07-0500:00:00

mitre

www.cve.org

madefornet

http debugger

windows service

seclevel registry key

unprivileged application

netfiltersdk wrapper

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

25.8%

JSON

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.