Lucene search
HistoryMar 13, 2023 - 7:15 p.m.
CVE-2023-27010
wondershare
dr.fone
v12.9.6
vulnerability
privilege escalation
weak permissions
cve-2023-27010
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable.
Affected configurations
Node
wondersharedr.foneMatch12.9.6windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| wondershare:dr.fone | wondershare dr.fone | eq | 12.9.6 |
Related
packetstorm
packetstorm
Wondershare Dr Fone 12.9.6 Weak Permissions / Privilege Escalation
2023-03-09 00:00:00
zdt
zdt
Wondershare Dr Fone 12.9.6 - Privilege Escalation Vulnerability
2023-04-07 00:00:00
nvd
nvd
CVE-2023-27010
2023-03-13 19:15:22
prion
prion
Code injection
2023-03-13 19:15:00
cvelist
cvelist
CVE-2023-27010
2023-03-13 00:00:00
exploitdb
exploitdb
Wondershare Dr Fone 12.9.6 - Privilege Escalation
2023-04-07 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
Related for CVE-2023-27010