Privilege Escalation Vulnerability in Wondershare Dr.Fone Software
CVE-2023-27010

7.8HIGH

Key Information:

Vendor

Wondershare

Status
Dr.fone
Vendor
CVE Published:
13 March 2023

What is CVE-2023-27010?

Wondershare Dr.Fone version 12.9.6 has been found to have weak permissions set for the WsDrvInst service. This flaw opens avenues for attackers to escalate their privileges by modifying or overwriting the executable. As a consequence, this vulnerability may allow unauthorized users to gain elevated access to system functionalities, posing significant risks to user data and system integrity.

References

https://cwe.mitre.org/data/definitions/250.html
https://packetstormsecurity.com/files/171301/Wondershare-...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.