What’s Vulnerable › Vulnerabilities

CVE-2023-35841: WinFlash Driver Permissions Issue

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-05-14 · updated 2026-06-17
• Weakness: CWE-732

Description

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

Affected products

• Phoenix WinFlash Driver: before 4.5.0.0 — fixed in 4.5.0.0

How to fix

Upgrade to a fixed version: Phoenix WinFlash Driver 4.5.0.0. Check the vendor advisory for mitigations.

References

• https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
• https://jvn.jp/en/vu/JVNVU93886750/index.html
• https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/
• https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html
• https://jvn.jp/en/vu/JVNVU93886750/index.html
• https://www.phoenix.com/security-notifications/cve-2023-35841/

Get alerted when CVE-2023-35841 or the next vulnerability affects your stack