CVE-2023-27647

Published: Apr 14, 2023Modified: Feb 10, 2025

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method.

Affected (1)

Products: Dualspace: Lock Master

Dualspace

1 product

Lock Master

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dualspace Lock Master	Version 2.2.4

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (6)

http://www.dualspace.com/pc/en/products.html

Source: cve@mitre.org

Product

https://app-lock-master.en.uptodown.com/android/download

Source: cve@mitre.org

Product

https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md

Source: cve@mitre.org

ExploitProductThird Party Advisory

http://www.dualspace.com/pc/en/products.html

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://app-lock-master.en.uptodown.com/android/download

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitProductThird Party Advisory

Timeline

No history available yet.