PT-2023-20604 · Oppo · Oppo Find X3+1

Published 2023-08-09 · Updated 2024-09-10 · CVE-2023-26310

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mobile phone backup app (affected versions not specified)

Description There is a command injection problem in the old version of the mobile phone backup app.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Argument Injection

Weakness Enumeration

CWE-77

CWE-88

Related Identifiers

CVE-2023-26310

Affected Products

Oppo Find X3

Coloros

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2023-26310 · Security Note
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1684402464721477632 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-26310 · Vendor Advisory
• https://twitter.com/AnonTroyano303/status/1833571077521289654 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1689230121104773120 · Twitter Post
• https://twitter.com/CVEnew/status/1689711687572901888 · Twitter Post
• https://t.me/cibsecurity/68080 · Telegram Post
• https://t.me/cvenotify/56077 · Telegram Post
• https://twitter.com/CVEnew/status/1689938001512558592 · Twitter Post
• https://twitter.com/CVEnew/status/1689749371095498756 · Twitter Post
• https://twitter.com/CVEnew/status/1689198261683290112 · Twitter Post
• https://t.me/cvenotify/56057 · Telegram Post
• https://twitter.com/CVEnew/status/1689919283642650624 · Twitter Post