CVE-2019-25344

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Incorrect Permission Assignment for Critical Resource pada wondershare mobilego. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.

Rincian

Terbit di NVD

12 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/mobilego-insecure-file-permissions advisory pihak ketiga
• https://www.exploit-db.com/exploits/47667 exploit · vdb entry
• https://www.wondershare.net/ product
• https://www.wondershare.net/mobilego/ product