PT-2026-2377 · Wondershare · Wondershare Dr.Fone

Luis Martinez · Publicado 2026-01-13 · Atualizado 2026-01-28 · CVE-2022-50901

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 11.4.9

Description Wondershare Dr.Fone version 11.4.9 has an issue with an unquoted service path in the DFWSIDService. This could allow local users to potentially run arbitrary code. The unquoted path is located at 'C:Program Files (x86)WondershareWondershare Dr.Fone'. An attacker could exploit this by injecting malicious executables that would run with LocalSystem privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2022-50901

Produtos afetados

Wondershare Dr.Fone

Referências · 7

• 🔥 https://exploit-db.com/exploits/50755 · Exploit
• https://osv.dev/vulnerability/CVE-2022-50901 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011759630569881671 · Publicação no Twitter
• https://wondershare.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-50901 · Nota de Segurança
• https://t.me/cveNotify/150201 · Publicação no Telegram
• https://vulncheck.com/advisories/wondershare-drfone-dfwsidservice-unquoted-service-path · Nota