PT-2025-52695 · Wondershare · Mirrorgo

Luis Martinez · Published 2025-12-22 · Updated 2025-12-23 · CVE-2022-50690

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare MirrorGo version 2.0.11.346

Description Wondershare MirrorGo version 2.0.11.346 has a local privilege escalation issue. Incorrect file permissions on executable files allow unprivileged local users to replace the ElevationService.exe file with a malicious file. This enables the execution of arbitrary code with LocalSystem privileges.

Recommendations Apply appropriate file permissions to the ElevationService.exe executable to prevent unauthorized modification.

Exploit

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-50690

Affected Products

Mirrorgo

References · 6

• 🔥 https://exploit-db.com/exploits/50787 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50690 · Security Note
• https://twitter.com/CVEnew/status/2003233953172611543 · Twitter Post
• https://twitter.com/TheHackerWire/status/2003432123957674478 · Twitter Post
• https://vulncheck.com/advisories/wondershare-mirrorgo-local-privilege-escalation-via-insecure-file-permissions · Note
• https://wondershare.com · Note