by Kastro
Paper/Archive/CVE-2021-23247

CVE-2021-23247

OPPO — A command injection vulerability found in quick game engine allows arbitrary remote code in quick app.

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.5.785 × 2015.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine

Affected

ProductAffectedFixed inSource
OPPO Quick App4.5.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsecurity.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1501448054614794240