CVE-2023-28252 PoC — Windows Common Log File System Driver Elevation of Privilege Vulnerability

Source

https://github.com/bkstephen/Compiled-PoC-Binary-For-CVE-2023-28252

Associated Vulnerability

Title: Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2023-28252)
Description:Windows Common Log File System Driver Elevation of Privilege Vulnerability

Description

The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252

Readme

# Compiled PoC Binary For CVE-2023-28252
### The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252

The precompiled binary is a slightly modified version of the PoC exploit seen in [fortra's repo](https://github.com/fortra/CVE-2023-28252).

The file can be run with the following arguments:
```powershell
clfs_eop.exe <PAYLOAD> <OFFSET,optional> <FLAG,optional>
```
`<PAYLOAD>` could be any payload you would like to run as nt system\authority if the exploit runs succesfully

`<OFFSET,optional>` has a default value of **1208**, see [fortra's repo](https://github.com/fortra/CVE-2023-28252) for an explanation how to find the right flag, if needed

`<FLAG,optional>` has a default value of **1**, see [fortra's repo](https://github.com/fortra/CVE-2023-28252) for an explanation how to find the right flag, if needed

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →