PT-2023-21599 · Kiddoware · Kiddoware Kids Place Parental Control

Bernhard Gründling + 1 · Publicado 2023-05-29 · Atualizado 2025-01-14 · CVE-2023-28153

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiddoware Kids Place Parental Control version prior to 3.8.50

Description An issue in the Kiddoware Kids Place Parental Control application allows a child to temporarily remove all restrictions without the parents noticing. This can be achieved by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.

Recommendations For versions prior to 3.8.50, update to version 3.8.50 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-28153

Produtos afetados

Kiddoware Kids Place Parental Control

Referências · 3

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app · Exploit
• https://osv.dev/vulnerability/CVE-2023-28153 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-28153 · Nota de Segurança