CVE-2023-35863 | BDVDB-2026-206262 Detail

Description#

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ctrl-c.club/~blue/nfsdk.html
https://www.madefornet.com/products.html
https://www.michaelrowley.dev/research/posts/nfsdk/nfsdk.html

Exploit#

No public exploit known

History#

Version 12023-07-05Record published in the CVE List.
Version 22024-11-20Most recent update recorded in the CVE List.