What’s Vulnerable › Vulnerabilities

CVE-2021-44595

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 21.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-29 · updated 2026-07-09
• Weakness: CWE-862

Description

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.

Affected products

• Wondershare Dr.Fone: 2021-12-06

References

• http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
• https://medium.com/@tomerp_77017/wondershell-a82372914f26
• http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
• https://medium.com/%40tomerp_77017/wondershell-a82372914f26

Get alerted when CVE-2021-44595 or the next vulnerability affects your stack