PT-2023-31028 · Simplemobiletools · Simple Dialer

Edward Warren · Published 2023-12-27 · Updated 2024-01-04 · CVE-2023-49003

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions simplemobiletools Simple Dialer version 5.18.1

Description An issue in simplemobiletools Simple Dialer allows an attacker to bypass intended access restrictions via interaction with com.simplemobiletools.dialer.activities.DialerActivity.

Recommendations For simplemobiletools Simple Dialer version 5.18.1, consider restricting access to com.simplemobiletools.dialer.activities.DialerActivity until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-49003

Affected Products

Simple Dialer

References · 7

• 🔥 https://github.com/actuator/cve/blob/main/CVE-2023-49003 · Exploit
• 🔥 https://github.com/actuator/com.simplemobiletools.dialer/blob/main/CWE-928.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49003 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49003 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1740153332910424482 · Twitter Post
• https://twitter.com/CVEnew/status/1740121606410936715 · Twitter Post
• https://t.me/cvenotify/65421 · Telegram Post