CVE-2021-44596
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
A vulnerability in Wondershare Dr. Fone (version as of 2021-12-06) allows remote code execution. An unauthenticated user can communicate over UDP with the InstallAssistService.exe service (running with SYSTEM privileges) and manipulate it to execute a malicious executable without any validation, gaining SYSTEM privileges.
Risk Assessment
An attacker can remotely gain full control of the system with the highest privileges (SYSTEM), enabling malware installation, data theft, or complete infrastructure compromise.
Recommendation
Immediately update Wondershare Dr. Fone to the latest available version. If an update is not possible, block UDP traffic on the port used by InstallAssistService.exe or temporarily disable the service.
Original NVD description (English source)
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges