CVE-2021-44595 | BDVDB-2026-174971 Detail

Description#

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://medium.com/@tomerp_77017/wondershell-a82372914f26
http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
https://medium.com/%40tomerp_77017/wondershell-a82372914f26

Exploit#

No public exploit known

History#

Version 12022-04-29Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.