CVE-2021-44595
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
A vulnerability in Wondershare Dr. Fone (latest version as of 2021-12-06) is due to incorrect access control. A normal user can send manually crafted packets to the ElevationService.exe process and execute arbitrary code without validation, with SYSTEM privileges.
Risk Assessment
An attacker with low privileges can gain full system control (SYSTEM), leading to complete compromise of confidentiality, integrity, and availability of organizational data and resources.
Recommendation
Immediately update Wondershare Dr. Fone to the latest version if a patch is available, or consider temporarily disabling the ElevationService.exe service until fixes are released.
Other vulnerabilities in Wondershare Dr. Fone
See all- CVE-2022-50901High
Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\ to inject malicious executables that would run with LocalSystem privileges.
- CVE-2022-50900High
Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path to insert malicious code that will be executed with LocalSystem permissions during service startup.
- CVE-2021-44596Critical
A vulnerability in Wondershare Dr. Fone (version as of 2021-12-06) allows remote code execution. An unauthenticated user can communicate over UDP with the InstallAssistService.exe service (running with SYSTEM privileges) and manipulate it to execute a malicious executable without any validation, gaining SYSTEM privileges.
Original NVD description (English source)
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.