CVE-2023-35863

Name of the Vulnerable Software and Affected Versions MADEFORNET HTTP Debugger versions 9.12 and earlier

Description The issue arises because the Windows service in MADEFORNET HTTP Debugger does not set the seclevel registry key before launching the driver. This allows an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service gains exclusive access.

Recommendations For MADEFORNET HTTP Debugger versions 9.12 and earlier, consider setting the seclevel registry key manually before launching the driver to prevent unprivileged applications from obtaining a handle to the NetFilterSDK wrapper. At the moment, there is no information about a newer version that contains a fix for this vulnerability.