PT-2024-13445 · Unknown · Super Reboot (Root) Recovery

Published 2024-02-05 · Updated 2024-02-13 · CVE-2023-47354

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Super Reboot (Root) Recovery version 1.0.3

Description An issue in the PowerOffWidgetReceiver function allows attackers to arbitrarily reset or power off the device via a crafted intent.

Recommendations For Super Reboot (Root) Recovery version 1.0.3, consider disabling the PowerOffWidgetReceiver function until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2023-47354

Affected Products

Super Reboot (Root) Recovery

References · 8

• 🔥 https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47354 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47354 · Security Note
• https://play.google.com/store/apps/details?id=com.bdrm.superreboot · Note
• https://twitter.com/VulmonFeeds/status/1754680089889890427 · Twitter Post
• https://twitter.com/CVEnew/status/1754686020803788974 · Twitter Post
• https://t.me/cvenotify/71289 · Telegram Post
• https://t.me/cvenotify/70132 · Telegram Post