PT-2022-9385 · Unknown · Quick Game Engine

Published 2022-04-01 · Updated 2022-04-09 · CVE-2021-23247

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quick Game Engine (affected versions not specified)

Description A command injection issue in the Quick Game Engine allows for arbitrary remote code execution in Quick apps, enabling remote attackers to gain arbitrary code execution in the Quick Game Engine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2021-23247

Affected Products

Quick Game Engine

References · 4

• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1501448054614794240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23247 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23247 · Vendor Advisory
• https://t.me/cibsecurity/40044 · Telegram Post