CVE-2023-35841

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

• CWE-732
• CWE-782

• https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.htmlExploit, Third Party Advisory
• https://jvn.jp/en/vu/JVNVU93886750/index.htmlThird Party Advisory
• https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/Vendor Advisory
• https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.htmlExploit, Third Party Advisory
• https://jvn.jp/en/vu/JVNVU93886750/index.htmlThird Party Advisory
• https://www.phoenix.com/security-notifications/cve-2023-35841/Vendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35836An issue was discovered in SolaX Pocket WiFi 3 through 3.001…6.5
• CVE-2023-35837An issue was discovered in SolaX Pocket WiFi 3 through 3.001…9.8
• CVE-2023-35838The WireGuard client 0.5.3 on Windows insecurely configures …5.7
• CVE-2023-35839A bypass in the component sofa-hessian of Solon before v2.3.…9.8
• CVE-2023-3584Mattermost fails to properly check the authorization of POST…3.1
• CVE-2023-35840_joinPath in elFinderVolumeLocalFileSystem.class.php in elFi…6.5
• CVE-2023-35843NocoDB through 0.106.0 (or 0.109.1) has a path traversal vul…7.5
• CVE-2023-35844packages/backend/src/routers in Lightdash before 0.510.3 has…7.5
• CVE-2023-35845Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS…4.7
• CVE-2023-35846VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not …7.5
• CVE-2023-35847VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not …7.5
• CVE-2023-35848VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks cer…7.5