CVE-2023-28153

Published May 29, 2023

Last updated a year ago

CVSS medium 6.4

Overview

Description: An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.4
Impact score: 5.9
Exploitability score: 0.5
Vector string: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:kiddoware:kiddoware:*:*:*:*:*:android:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6CA1F3F8-FFAA-4E13-9753-AC7CEB8612B4",
            "versionEndExcluding": "3.8.50"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References