Vulnerability Description
iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attackers to execute code with elevated privileges. Attackers can insert a malicious executable into the unquoted service path to run with LocalSystem privileges when the service restarts.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/50040
- https://www.i-funbox.com/en/index.html
- https://www.vulncheck.com/advisories/ifunbox-apple-mobile-device-service-unquote
FAQ
What is CVE-2021-47803?
CVE-2021-47803 is a vulnerability with a CVSS score of 7.8 (HIGH). iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attackers to execute code with elevated privileges. Attackers can insert a malicious ex...
How severe is CVE-2021-47803?
CVE-2021-47803 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47803?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.