High severity · published Jun 26, 2023
CVE-2023-36631
Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user…
7.8
CVSS
0.7%
EPSS
No
On KEV
Description
Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BW
Binisoft Windows Firewall Control · Malwarebytes
6.9.2.0 · source: NVD
Affected product
BW
Binisoft Windows Firewall Control
Malwarebytes
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-36631
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-36631
Permissions Required
https://hackerone.com/reports/2000375
Exploit
https://www.bencteux.fr/posts/malwarebytes_wfc/
More from Binisoft Windows Firewall Control
9.8
CVE-2024-25089
Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes
7.8
CVE-2022-25150
In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges
4.5
CVE-2025-54569
In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation