PT-2024-13446 · Unknown · Com.Eypcnnapps.Quickreboot

Published 2024-02-05 · Updated 2024-02-13 · CVE-2023-47355

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) version 1.0.8

Description The application has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation.

Recommendations For version 1.0.8, consider disabling the exposed broadcast receivers (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) as a temporary workaround to prevent unauthorized broadcasts until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-47355

Affected Products

Com.Eypcnnapps.Quickreboot

References · 6

• 🔥 https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47355 · Security Note
• https://twitter.com/VulmonFeeds/status/1754559088241856962 · Twitter Post
• https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot · Note
• https://twitter.com/CVEnew/status/1754545271630164299 · Twitter Post