PT-2024-13530 · Unknown · Com.Bdrm.Superreboot

Published 2024-02-05 · Updated 2024-02-13 · CVE-2023-47889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions com.bdrm.superreboot version 1.0.3

Description The Android application exposes several critical actions through its exported broadcast receivers, allowing any app on the device to send unauthorized broadcasts. This can lead to unintended consequences, including powering off, system reboot, and entering recovery mode.

Recommendations For version 1.0.3, consider restricting access to the exported broadcast receivers to prevent unauthorized broadcasts until a patch is available. As a temporary workaround, disabling the affected broadcast receivers can help minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-927

Related Identifiers

CVE-2023-47889

Affected Products

Com.Bdrm.Superreboot

References · 6

• 🔥 https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47889 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47889 · Security Note
• https://twitter.com/CVEnew/status/1754686021722337745 · Twitter Post
• https://t.me/cvenotify/70145 · Telegram Post
• https://t.me/cvenotify/70208 · Telegram Post