CVE-2021-44596
🔴 Łataj teraz
Błąd w Wondershare Dr. Fone umożliwia zdalne wykonanie kodu przez nieautoryzowanego użytkownika.
CVSS
9.8
EPSS
22.3%
Exploit
poc
Vendor
wondershare
Opis źródłowy (NVD)
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges
exploit rce
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 9.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 22.3% |
| Opublikowano (NVD) | 2022-04-29 12:15:07 UTC |
| Ostatnia modyfikacja (NVD) | 2026-07-09 01:17:09 UTC |
Referencje
- http://packetstormsecurity.com/files/167035/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html (cve@mitre.org) [Exploit, Third Party Advisory, VDB Entry]
- https://medium.com/@tomerp_77017/wondershell-a82372914f26 (cve@mitre.org)
- https://medium.com/%40tomerp_77017/wondershell-a82372914f26 (af854a3a-2127-422b-91ae-364da2661108)