CVE-2023-27647

EUVD-2023-31383
An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CISA-ADPADP
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Common Weakness Enumeration
References
http://www.dualspace.com/pc/en/products.html
https://app-lock-master.en.uptodown.com/android/download
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md
http://www.dualspace.com/pc/en/products.html
https://app-lock-master.en.uptodown.com/android/download
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md