Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-35841

WinFlash Driver Permissions Issue

Description

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix WinFlash Driver

Default version status: unaffected

  • 0 to < 4.5.0.0affected

References