2 results (0.001 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3

CVE-2023-31748 – MobileTrans 4.0.11 - Weak Service Privilege Escalation

https://notcve.org/view.php?id=CVE-2023-31748

19 May 2023 — Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file. MobileTrans version 4.0.11 suffers from having a weak service permission vulnerability. • https://packetstorm.news/files/id/172466 • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-27763

https://notcve.org/view.php?id=CVE-2023-27763

04 Apr 2023 — An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file. • https://github.com/liong007/Wondershare/issues/5 • CWE-426: Untrusted Search Path •