by Kastro
Paper/Archive/CVE-2021-44596

CVE-2021-44596

mitre — Wondershare LTD Dr.

EPSS 23%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.7.977 × 2019.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmedium.com/@tomerp_77017/wondershell-a82372914f26refpacketstormsecurity.com/files/167035/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.htmlrefmedium.com/%40tomerp_77017/wondershell-a82372914f26