PT-2023-21281 · T Me Studios · T-Me Studios Change Color Of Keypad

Published 2023-04-14 · Updated 2023-04-21 · CVE-2023-27648

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions T-ME Studios Change Color of Keypad version 1.275.1.277

Description A Directory Traversal issue allows a remote attacker to execute arbitrary code via the dex file in the internal storage. This enables the attacker to potentially access and manipulate sensitive data.

Recommendations For version 1.275.1.277, consider restricting access to the internal storage to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the dex file in the internal storage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-27648

Affected Products

T-Me Studios Change Color Of Keypad

References · 8

• 🔥 https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27648 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27648 · Vendor Advisory
• https://t.me/cibsecurity/62134 · Telegram Post
• https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad · Note
• https://t.me/cvenotify/48789 · Telegram Post
• https://t.me/cvenotify/48226 · Telegram Post
• https://corporate.timmystudios.com · Note