high8.8Public exploit code
CVE-2021-44595
Wondershare Dr.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)2022-05-11 · local · windows · Verified
Impact
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondershare | Dr.Fone | Version 2021-12-06 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
- https://medium.com/@tomerp_77017/wondershell-a82372914f26
- http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
- https://medium.com/%40tomerp_77017/wondershell-a82372914f26