Lucene search

MitreCVE-2023-29734

HistoryMay 30, 2023 - 8:15 p.m.

CVE-2023-29734

2023-05-3020:15:10

CWE-269

mitre

web.nvd.nist.gov

cve-2023-29734

edjing mix

android

privilege escalation

unauthorized apps

database manipulation

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.

Affected configurations

Nvd

Node

mwmedjing_mixMatch7.09.01android

VendorProductVersionCPE
mwmedjing_mix7.09.01cpe:2.3:a:mwm:edjing_mix:7.09.01:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
mwm	edjing_mix	7.09.01	cpe:2.3:a:mwm:edjing_mix:7.09.01:::::android::

References

github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29734/CVE%20detail.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

Related for CVE-2023-29734