CVEs-PoC/2021/CVE-2021-44595.md

CVE-2021-44595

Description

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.

POC

Reference

• http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html
• https://medium.com/%40tomerp_77017/wondershell-a82372914f26
• https://medium.com/@tomerp_77017/wondershell-a82372914f26

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/tomerpeled92/CVE