Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50901. PoCs published by Luis Martínez.
AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in Wondershare Dr.Fone 11.4.9. The vulnerability allows local privilege escalation by exploiting the service path's lack of quotes, enabling an attacker to insert malicious executables in the system root path.
Description
Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\ to inject malicious executables that would run with LocalSystem privileges.
Exploits (1)
This is a technical writeup detailing an unquoted service path vulnerability in Wondershare Dr.Fone 11.4.9. The vulnerability allows local privilege escalation by exploiting the service path's lack of quotes, enabling an attacker to insert malicious executables in the system root path.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H