Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."
References
| Link | Resource |
|---|---|
| https://hackerone.com/reports/2000375 | Permissions Required |
| https://www.bencteux.fr/posts/malwarebytes_wfc/ | Exploit |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password." |
06 Jul 2023, 15:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://hackerone.com/reports/2000375 - Permissions Required | |
| References | (MISC) https://www.bencteux.fr/posts/malwarebytes_wfc/ - Exploit | |
| CPE | cpe:2.3:a:malwarebytes:binisoft_windows_firewall_control:6.9.2.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Malwarebytes binisoft Windows Firewall Control
Malwarebytes |
|
| CWE | NVD-CWE-Other |
26 Jun 2023, 13:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-26 12:15
Updated : 2024-08-02 17:16
NVD link : CVE-2023-36631
Mitre link : CVE-2023-36631
JSON object : View
Products Affected
malwarebytes
- binisoft_windows_firewall_control
CWE