PT-2023-20894 · Wondershare · Wondershare Dr.Fone

Publicado 2023-03-13 · Atualizado 2025-03-03 · CVE-2023-27010

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.9.6

Description The issue is related to weak permissions for the service WsDrvInst, allowing attackers to escalate privileges by modifying or overwriting the executable.

Recommendations For Wondershare Dr.Fone version 12.9.6, consider restricting access to the WsDrvInst service to prevent privilege escalation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-250

Identificadores relacionados

CVE-2023-27010

Produtos afetados

Wondershare Dr.Fone

Referências · 8

• 🔥 https://exploit-db.com/exploits/51324 · Exploit
• https://osv.dev/vulnerability/CVE-2023-27010 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-27010 · Nota de Segurança
• https://t.me/cvenotify/113172 · Publicação no Telegram
• https://cwe.mitre.org/data/definitions/250.html · Nota
• https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html · Nota
• https://t.me/cvenotify/46666 · Publicação no Telegram
• https://t.me/cibsecurity/59926 · Publicação no Telegram