high7.8Public exploit code
CVE-2023-27010
Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wondershare Dr Fone 12.9.6 - Privilege Escalation2023-04-07 · local · windows
Impact
Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondershare | Dr.Fone | Version 12.9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/250.html
- https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html
- https://cwe.mitre.org/data/definitions/250.html
- https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html