PT-2023-20894 · Wondershare · Wondershare Dr.Fone

Published 2023-03-13 · Updated 2025-03-03 · CVE-2023-27010

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.9.6

Description The issue is related to weak permissions for the service WsDrvInst, allowing attackers to escalate privileges by modifying or overwriting the executable.

Recommendations For Wondershare Dr.Fone version 12.9.6, consider restricting access to the WsDrvInst service to prevent privilege escalation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2023-27010

Affected Products

Wondershare Dr.Fone

References · 8

• 🔥 https://exploit-db.com/exploits/51324 · Exploit
• https://osv.dev/vulnerability/CVE-2023-27010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27010 · Security Note
• https://t.me/cvenotify/113172 · Telegram Post
• https://cwe.mitre.org/data/definitions/250.html · Note
• https://packetstormsecurity.com/files/171301/Wondershare-Dr-Fone-12.9.6-Weak-Permissions-Privilege-Escalation.html · Note
• https://t.me/cvenotify/46666 · Telegram Post
• https://t.me/cibsecurity/59926 · Telegram Post