CVE-2021-44596

CRITICAL

Wondershare Dr.Fone 12.0.7 - Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-44596 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWondershare Dr.Fone 12.0.7 - Remote Code Execution (RCE)ExploitDB exploitby Netanel CohenNot analyzed1 file
ExploitDB
PoC details

References

6