CVE-2023-47889

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-47889
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md Exploit
https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:binhdrm26:super_reboot:1.0.3:*:*:*:*:android:*:*
History

21 Nov 2024, 08:30

Type Values Removed Values Added
References () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit

13 Feb 2024, 18:16

Type Values Removed Values Added
References () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - () https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - Exploit
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:a:binhdrm26:super_reboot:1.0.3:*:*:*:*:android:*:*
First Time Binhdrm26
Binhdrm26 super Reboot

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) La aplicación de Android BINHDRM26 com.bdrm.superreboot 1.0.3 expone varias acciones críticas a través de sus receptores de transmisión exportados. Estas acciones expuestas pueden permitir que cualquier aplicación del dispositivo envíe transmisiones no autorizadas, lo que tendrá consecuencias no deseadas. La vulnerabilidad es particularmente preocupante porque estas acciones incluyen apagar, reiniciar el sistema y entrar en modo de recuperación.

06 Feb 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 01:15

Updated : 2024-11-21 08:30

NVD link : CVE-2023-47889

Mitre link : CVE-2023-47889

CVE.ORG link : CVE-2023-47889

JSON object : View

Products Affected

binhdrm26

  • super_reboot
CWE
NVD-CWE-Other