CVE-2023-47355

The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot	Product
https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:eyuepcanyilmaz:root_quick_reboot:1.0.8:*:*:*:*:*:android:*

History

20 Jun 2025, 20:15

Type	Values Removed	Values Added
CWE		CWE-20

Information

Published : 2024-02-05 16:15

Updated : 2025-06-20 20:15

NVD link : CVE-2023-47355

Mitre link : CVE-2023-47355

CVE.ORG link : CVE-2023-47355

JSON object : View

Products Affected

eyuepcanyilmaz

root_quick_reboot

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2023-47355", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-02-05T16:15:54.910", "references": [{"url": "https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation."}, {"lang": "es", "value": "La aplicaci\u00f3n com.eypcnnapps.quickreboot (tambi\u00e9n conocida como Eyuep Can Yilmaz {ROOT] Quick Reboot) 1.0.8 para Android ha expuesto receptores de transmisi\u00f3n para apagado, reinicio y recuperaci\u00f3n (por ejemplo, com.eypcnnapps.quickreboot.widget.PowerOff) que son susceptibles a transmisiones no autorizadas debido a la falta de validaci\u00f3n de entrada."}], "lastModified": "2025-06-20T20:15:25.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eyuepcanyilmaz:root_quick_reboot:1.0.8:*:*:*:*:*:android:*", "vulnerable": true, "matchCriteriaId": "6323C860-5079-437A-AA17-C6B0F66D11B4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}