CVE-2022-50903

Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path

Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path by placing malicious executables in specific filesystem locations that will be executed with LocalSystem permissions during service startup.

Affected

Wondershare · Wondershare MobileTrans

CVSS v4.0 VULNCHECK

8.5 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 VULNCHECK

8.4 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.27% chance of exploitation in the next 30 days, 18th percentile

Published

2026-01-13

Updated

2026-03-05

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/50756

Security advisories

• https://www.vulncheck.com/advisories/wondershare-mobiletrans-elevationservice-unquoted-se…
• https://www.wondershare.com

References

• CVE Record
• NVD entry