Paper/Archive/CVE-2023-36621

CVE-2023-36621

mitre — An issue was discovered in the Boomerang Parental Control application through 13.83 for Android.

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 65.9.659 × 2013.2 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refsec-consult.com/blog/detail/the-hidden-costs-of-parental-control-apps refuseboomerang.com refseclists.org/fulldisclosure/2023/Jul/12