CVE-2023-35841 - Vulnerability Details - OpenCVE

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Phoenix	Winflash Driver

No data.

No data.

References

Link	Providers
https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
https://jvn.jp/en/vu/JVNVU93886750/index.html
https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/
https://www.phoenix.com/security-notifications/cve-2023-35841/

History

Mon, 28 Jul 2025 21:00:00 +0000

Type	Values Removed	Values Added
Description	Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.	Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.
References		https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/

MITRE

Status: PUBLISHED

Assigner: Phoenix

Published: 2024-05-14T14:56:14.743Z

Updated: 2025-07-28T20:49:33.663Z

Reserved: 2023-06-19T00:35:50.974Z

Link: CVE-2023-35841

Vulnrichment

Updated: 2024-08-02T16:30:45.376Z

NVD

Status : Awaiting Analysis

Published: 2024-05-14T16:15:36.953

Modified: 2025-07-28T21:15:25.780

Link: CVE-2023-35841

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-35841", "assignerOrgId": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "state": "PUBLISHED", "assignerShortName": "Phoenix", "dateReserved": "2023-06-19T00:35:50.974Z", "datePublished": "2024-05-14T14:56:14.743Z", "dateUpdated": "2025-07-28T20:49:33.663Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "WinFlash Driver", "vendor": "Phoenix", "versions": [{"lessThan": "4.5.0.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Takahiro Haruyama of Broadcom"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.<p>This issue affects WinFlash Driver: before 4.5.0.0.</p>"}], "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0."}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-732", "description": "CWE-732 Incorrect Permission Assignment for Critical Resource", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-782", "description": "CWE-782 Exposed IOCTL with Insufficient Access Control", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "shortName": "Phoenix", "dateUpdated": "2025-07-28T20:49:33.663Z"}, "references": [{"url": "https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/"}, {"url": "https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html"}, {"url": "https://jvn.jp/en/vu/JVNVU93886750/index.html"}], "source": {"discovery": "UNKNOWN"}, "title": "WinFlash Driver Permissions Issue", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-35841", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-14T18:32:21.876164Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:phoenix:winflash_driver:*:*:*:*:*:*:*:*"], "vendor": "phoenix", "product": "winflash_driver", "versions": [{"status": "affected", "version": "0", "lessThan": "4.5.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:18:27.432Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:45.376Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.phoenix.com/security-notifications/cve-2023-35841/", "tags": ["x_transferred"]}, {"url": "https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU93886750/index.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.phoenix.com/security-notifications/cve-2023-35841/", "tags": ["x_transferred"]}, {"url": "https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU93886750/index.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:45.376Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-35841", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-14T18:32:21.876164Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:phoenix:winflash_driver:*:*:*:*:*:*:*:*"], "vendor": "phoenix", "product": "winflash_driver", "versions": [{"status": "affected", "version": "0", "lessThan": "4.5.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-14T18:34:42.972Z"}}], "cna": {"title": "WinFlash Driver Permissions Issue", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Takahiro Haruyama of Broadcom"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Phoenix", "product": "WinFlash Driver", "versions": [{"status": "affected", "version": "0", "lessThan": "4.5.0.0", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/"}, {"url": "https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html"}, {"url": "https://jvn.jp/en/vu/JVNVU93886750/index.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.", "supportingMedia": [{"type": "text/html", "value": "Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.<p>This issue affects WinFlash Driver: before 4.5.0.0.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-732", "description": "CWE-732 Incorrect Permission Assignment for Critical Resource"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-782", "description": "CWE-782 Exposed IOCTL with Insufficient Access Control"}]}], "providerMetadata": {"orgId": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "shortName": "Phoenix", "dateUpdated": "2025-07-28T20:49:33.663Z"}}}, "cveMetadata": {"cveId": "CVE-2023-35841", "state": "PUBLISHED", "dateUpdated": "2025-07-28T20:49:33.663Z", "dateReserved": "2023-06-19T00:35:50.974Z", "assignerOrgId": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", "datePublished": "2024-05-14T14:56:14.743Z", "assignerShortName": "Phoenix"}, "dataVersion": "5.1"}