Lucene search

MitreCVE-2023-29727

HistoryMay 30, 2023 - 11:15 p.m.

CVE-2023-29727

2023-05-3023:15:09

mitre

web.nvd.nist.gov

call blocker

android

unauthorized access

user privacy

privilege escalation

cve-2023-29727

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

55.8%

JSON

The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.

Affected configurations

Nvd

Node

applikacall_blockerMatch6.6.3android

VendorProductVersionCPE
applikacall_blocker6.6.3cpe:2.3:a:applika:call_blocker:6.6.3:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
applika	call_blocker	6.6.3	cpe:2.3:a:applika:call_blocker:6.6.3:::::android::

References

github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29727/CVE%20detail.md

play.google.com/store/apps/details?id=com.cuiet.blockCalls

www.call-blocker.info/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

55.8%

JSON

Related for CVE-2023-29727