PT-2023-21599 · Kiddoware · Kiddoware Kids Place Parental Control

Bernhard Gründling + 1 · Published 2023-05-29 · Updated 2025-01-14 · CVE-2023-28153

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiddoware Kids Place Parental Control version prior to 3.8.50

Description An issue in the Kiddoware Kids Place Parental Control application allows a child to temporarily remove all restrictions without the parents noticing. This can be achieved by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.

Recommendations For versions prior to 3.8.50, update to version 3.8.50 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2023-28153

Affected Products

Kiddoware Kids Place Parental Control

References · 3

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app · Exploit
• https://osv.dev/vulnerability/CVE-2023-28153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28153 · Security Note