CVE-2025-0834CWE-269

Wondershare Dr.Fone Privilege Scalation Vulnerability

High · published January 30, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21. This vulnerability could allow an attacker to escalate privileges by replacing the binary ‘C:\ProgramData\Wondershare\wsServices\ElevationService.exe’ with a malicious binary. This binary will be executed by SYSTEM automatically.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-01-30T09:02Z
EPSS history
Timeline
  • 30 JAN 09:02Z
    Wondershare Dr.Fone Privilege Scalation Vulnerability
    cvelistv5