CVE-2023-35863

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access...

CVE-2023-35863

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access...

CVE-2023-35863

CVE-2023-35863 affects MADEFORNET HTTP Debugger up to version 9.12. Root cause: the Windows service does not set the seclevel registry key before launching the driver, enabling an unprivileged local user to obtain a handle to the NetFilterSDK wrapper prior to the service gaining exclusive access....