CVE-2023-29741

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database

Critical · published May 30, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

🚨 An unauthorized app can escalate privileges by simply manipulating the database in BestWeather v7.3.1! 🔥 This means trouble for your device! Think of the database as a hotel where unauthorized guests can sneak into restricted areas — they could access VIP rooms and sensitive information without a key card! If exploited, attackers could gain unauthorized access to sensitive functionalities and data, potentially compromising your privacy and control over the app. This could lead to data leaks, account takeovers, or worse, as they could manipulate or delete crucial information. This is absolutely devastating!

Put simply

Think of the database as a hotel where unauthorized guests can sneak into restricted areas — they could access VIP rooms and sensitive information without a key card! This vulnerability in BestWeather allows unauthorized applications to interact with the app's database in a way that escalates privileges, enabling them to execute unauthorized commands.

What to do

If exploited, attackers could gain unauthorized access to sensitive functionalities and data, potentially compromising your privacy and control over the app. This could lead to data leaks, account takeovers, or worse, as they could manipulate or delete crucial information. This is absolutely devastating! To protect yourself, immediately update BestWeather to the newest version available. Review permissions for installed apps and restrict access to sensitive data. Consider implementing app security measures to monitor unauthorized access. You've got this! By following these steps, you can secure your device and keep those unauthorized apps at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01207 · 68.1th percentile
Published
2023-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database
    cvelistv5