Filtered by vendor Wondershare Subscriptions
Filtered by product Dr.fone Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-27992 1 Wondershare 1 Dr.fone 2024-08-04 7.8 High
Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users.
CVE-2021-44595 1 Wondershare 1 Dr.fone 2024-08-04 8.8 High
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.
CVE-2021-44596 1 Wondershare 1 Dr.fone 2024-08-04 9.8 Critical
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges
CVE-2023-29835 1 Wondershare 1 Dr.fone 2024-08-02 7.8 High
Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function.
CVE-2023-27767 1 Wondershare 1 Dr.fone 2024-08-02 7.8 High
An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.
CVE-2023-27010 1 Wondershare 1 Dr.fone 2024-08-02 7.8 High
Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable.