CVE-2023-47354

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-47354
An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md Exploit
https://play.google.com/store/apps/details?id=com.bdrm.superreboot Product
https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md Exploit
https://play.google.com/store/apps/details?id=com.bdrm.superreboot Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:binhdrm26:super_reboot:1.0.3:*:*:*:*:android:*:*
History

21 Nov 2024, 08:30

Type Values Removed Values Added
References () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit
References () https://play.google.com/store/apps/details?id=com.bdrm.superreboot - Product () https://play.google.com/store/apps/details?id=com.bdrm.superreboot - Product

13 Feb 2024, 18:37

Type Values Removed Values Added
CPE cpe:2.3:a:binhdrm26:super_reboot:1.0.3:*:*:*:*:android:*:*
First Time Binhdrm26
Binhdrm26 super Reboot
References () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit
References () https://play.google.com/store/apps/details?id=com.bdrm.superreboot - () https://play.google.com/store/apps/details?id=com.bdrm.superreboot - Product
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) Un problema en la función PowerOffWidgetReceiver de Super Reboot (Root) Recovery v1.0.3 permite a los atacantes restablecer o apagar arbitrariamente el dispositivo mediante un intento manipulado.
CWE NVD-CWE-Other

06 Feb 2024, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 00:15

Updated : 2024-11-21 08:30

NVD link : CVE-2023-47354

Mitre link : CVE-2023-47354

CVE.ORG link : CVE-2023-47354

JSON object : View

Products Affected

binhdrm26

  • super_reboot
CWE
NVD-CWE-Other