PT-2026-2377 · Wondershare · Wondershare Dr.Fone

Luis Martinez · Published 2026-01-13 · Updated 2026-01-28 · CVE-2022-50901

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 11.4.9

Description Wondershare Dr.Fone version 11.4.9 has an issue with an unquoted service path in the DFWSIDService. This could allow local users to potentially run arbitrary code. The unquoted path is located at 'C:Program Files (x86)WondershareWondershare Dr.Fone'. An attacker could exploit this by injecting malicious executables that would run with LocalSystem privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50901

Affected Products

Wondershare Dr.Fone

References · 7

• 🔥 https://exploit-db.com/exploits/50755 · Exploit
• https://osv.dev/vulnerability/CVE-2022-50901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50901 · Security Note
• https://twitter.com/CVEnew/status/2011759630569881671 · Twitter Post
• https://wondershare.com · Note
• https://t.me/cveNotify/150201 · Telegram Post
• https://vulncheck.com/advisories/wondershare-drfone-dfwsidservice-unquoted-service-path · Note