Skip to content
OpenAdvisories
Unscored CVE-2023-36631 EUVD-2023-40575GHSA-3652-93x3-2rrr

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windo…

Published Jun 26, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."

References