CVE-2023-47355

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

T

he com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation.

References

Link	Resource
https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot	Product
https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:eyuepcanyilmaz:root_quick_reboot:1.0.8:*:*:*:*:*:android:*

History

20 Jun 2025, 20:15

Type	Values Removed	Values Added
CWE		CWE-20

21 Nov 2024, 08:30

Type	Values Removed	Values Added
References	~~() https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md - Exploit, Third Party Advisory~~	() https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md - Exploit, Third Party Advisory
References	~~() https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot - Product~~	() https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot - Product

Information

Published : 2024-02-05 16:15

Updated : 2025-06-20 20:15

NVD link : CVE-2023-47355

Mitre link : CVE-2023-47355

CVE.ORG link : CVE-2023-47355

JSON object : View

Products Affected

eyuepcanyilmaz

root_quick_reboot

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2023-47355", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-02-05T16:15:54.910", "references": [{"url": "https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation."}, {"lang": "es", "value": "La aplicaci\u00f3n com.eypcnnapps.quickreboot (tambi\u00e9n conocida como Eyuep Can Yilmaz {ROOT] Quick Reboot) 1.0.8 para Android ha expuesto receptores de transmisi\u00f3n para apagado, reinicio y recuperaci\u00f3n (por ejemplo, com.eypcnnapps.quickreboot.widget.PowerOff) que son susceptibles a transmisiones no autorizadas debido a la falta de validaci\u00f3n de entrada."}], "lastModified": "2025-06-20T20:15:25.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eyuepcanyilmaz:root_quick_reboot:1.0.8:*:*:*:*:*:android:*", "vulnerable": true, "matchCriteriaId": "6323C860-5079-437A-AA17-C6B0F66D11B4"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}