Skip to content
OpenAdvisories
High · 7.8 CVE-2023-35841 EUVD-2023-39834GHSA-qhcp-3fxf-c8vc

WinFlash Driver Permissions Issue

Published May 14, 2024 · Updated Jul 28, 2025 · Assigned by Phoenix

Description

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.

Affected products

VendorProductAffectedFixed
Phoenix WinFlash Driver < 4.5.0.0 4.5.0.0

References