Vulnerabilities > CVE-2021-44595 - Missing Authorization vulnerability in Wondershare Dr.Fone 20211206
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |