CVE-2022-50690

Summary

Wondershare MirrorGo 2.0.11.346 contains a local privilege escalation vulnerability due to incorrect file permissions on executable files. Unprivileged local users can replace the ElevationService.exe with a malicious file to execute arbitrary code with LocalSystem privileges.

Affected Software

Weaknesses

• CWE-732: Incorrect Permission Assignment for Critical Resource

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/50787
• https://www.wondershare.com/
• https://www.vulncheck.com/advisories/wondershare-mirrorgo-local-privilege-escalation-via-insecure-file-permissions

• ←Previous
• Next→