Lucene search

[email protected]NVD:CVE-2023-27647

HistoryApr 14, 2023 - 8:15 p.m.

CVE-2023-27647

2023-04-1420:15:09

[email protected]

web.nvd.nist.gov

vulnerability

dualspace lock master

local attacker

denial of service

sensitive information

sharedprefproviderentrymethod

android.net.uri.insert

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

Percentile

5.1%

JSON

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method.

Affected configurations

Nvd

Node

dualspacelock_masterMatch2.2.4android

VendorProductVersionCPE
dualspacelock_master2.2.4cpe:2.3:a:dualspace:lock_master:2.2.4:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
dualspace	lock_master	2.2.4	cpe:2.3:a:dualspace:lock_master:2.2.4:::::android::

References

www.dualspace.com/pc/en/products.html

app-lock-master.en.uptodown.com/android/download

github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-27647

cvelist1 prion1 cve1