CVE-2023-48418

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
http://packetstormsecurity.com/files/176446/Android-DeviceVersionFragment.java-Privilege-Escalation.html
https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01	Vendor Advisory
http://packetstormsecurity.com/files/176446/Android-DeviceVersionFragment.java-Privilege-Escalation.html
https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:google:pixel_watch_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:google:pixel_watch:11:*:*:*:*:*:*:*

History

13 Feb 2025, 18:15

Type	Values Removed	Values Added
Summary	(en) In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation	(en) In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation

Information

Published : 2024-01-02 23:15

Updated : 2025-02-13 18:15

NVD link : CVE-2023-48418

Mitre link : CVE-2023-48418

CVE.ORG link : CVE-2023-48418

JSON object : View

Products Affected

google

pixel_watch_firmware
pixel_watch

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2023-48418", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "dsap-vuln-management@google.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-01-02T23:15:11.000", "references": [{"url": "http://packetstormsecurity.com/files/176446/Android-DeviceVersionFragment.java-Privilege-Escalation.html", "source": "dsap-vuln-management@google.com"}, {"url": "https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01", "tags": ["Vendor Advisory"], "source": "dsap-vuln-management@google.com"}, {"url": "http://packetstormsecurity.com/files/176446/Android-DeviceVersionFragment.java-Privilege-Escalation.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "dsap-vuln-management@google.com", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a\n\u00a0 \u00a0 possible way to access adb before SUW completion due to an insecure default\n\u00a0 \u00a0 value. This could lead to local escalation of privilege with no additional\n\u00a0 \u00a0 execution privileges needed. User interaction is not needed for\n\u00a0 \u00a0 exploitation"}, {"lang": "es", "value": "En checkDebuggingDisallowed de DeviceVersionFragment.java, existe una forma posible de acceder a adb antes de que se complete SUW debido a un valor predeterminado inseguro. Esto podr\u00eda conducir a una escalada local de privilegios sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n."}], "lastModified": "2025-02-13T18:15:40.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:pixel_watch_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E04969E8-7B37-48E1-89F9-02ABE00C9F4D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:google:pixel_watch:11:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ACD23DFF-E651-4901-847B-10A14669BEED"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "dsap-vuln-management@google.com"}