Lucene search

MitreCVE-2023-47354

HistoryFeb 06, 2024 - 12:15 a.m.

CVE-2023-47354

2024-02-0600:15:08

mitre

web.nvd.nist.gov

cve-2023-47354

poweroffwidgetreceiver

super reboot

root

recovery

nvd

security issue

intent crafted

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent

Affected configurations

Nvd

Node

binhdrm26super_rebootMatch1.0.3android

VendorProductVersionCPE
binhdrm26super_reboot1.0.3cpe:2.3:a:binhdrm26:super_reboot:1.0.3:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
binhdrm26	super_reboot	1.0.3	cpe:2.3:a:binhdrm26:super_reboot:1.0.3:::::android::

References

github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md

play.google.com/store/apps/details?id=com.bdrm.superreboot

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-47354