Lucene search

K
nvd[email protected]NVD:CVE-2022-47029
HistoryMay 30, 2023 - 8:15 p.m.

CVE-2022-47029

2023-05-3020:15:09
web.nvd.nist.gov
action launcher v50.5
privilege escalation
intent modification

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.1%

An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.

Affected configurations

Nvd
Node
actionlauncheraction_launcherMatch50.5android
VendorProductVersionCPE
actionlauncheraction_launcher50.5cpe:2.3:a:actionlauncher:action_launcher:50.5:*:*:*:*:android:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.1%

Related for NVD:CVE-2022-47029