CVE-2023-29727

Published May 30, 2023

Last updated a month ago

CVSS critical 9.8

Overview

Description: The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-922

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:applika:call_blocker:6.6.3:*:*:*:*:android:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77AB3E3E-9647-4731-80A9-C31D381CDEFD"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References