What is the CVSS score of CVE-2023-36631?

CVE-2023-36631 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.7%.

Is there a public PoC exploit available for CVE-2023-36631?

Yes, a public proof-of-concept exploit is available for CVE-2023-36631. Prioritise patching immediately. EPSS: 0.7%.

Malwarebytes CVE-2023-36631

HIGH

2023-06-26 cve@mitre.org

Authentication Bypass Microsoft Malwarebytes Binisoft Windows Firewall Control

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 26, 2023 - 12:15 nvd

HIGH 7.8

DescriptionNVD

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."

AnalysisAI

Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Malwarebytes

View all

CVE-2014-4936 CRITICAL Emergency POC

9.3 Dec 16

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)

CVE-2022-50971 HIGH This Week POC

8.5 Jun 19

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attacke

CVE-2018-5279 HIGH This Week POC

7.8 Jan 08