CVE-2023-36621

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android

published November 3, 2023

CVSS
โ€”
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

๐Ÿšจ Kids in the driver's seat! A sneaky workaround in the Boomerang Parental Control app allows children to dodge restrictions by exploiting Safe Mode โ€” a bit like finding the hidden key that unlocks all the doors! ๐Ÿ”‘ Think of the Boomerang app as a guard at a school. If the guard takes a break or doesn't check IDs, students could leave or change their schedules without anyone knowing! Here, Safe Mode is that break, letting kids uninstall the app or remove restrictions easily. This loophole means a child can run wild on their device, uninstalling the app or bypassing parental controls completely. The potential for accessing inappropriate content or making unauthorized purchases becomes alarmingly real! ๐Ÿšจ

Put simply

Think of the Boomerang app as a guard at a school. If the guard takes a break or doesn't check IDs, students could leave or change their schedules without anyone knowing! Here, Safe Mode is that break, letting kids uninstall the app or remove restrictions easily. The vulnerability arises because the Boomerang Parental Control app does not adequately secure its settings against Safe Mode, allowing users to bypass restrictions without alerting parents.

What to do

This loophole means a child can run wild on their device, uninstalling the app or bypassing parental controls completely. The potential for accessing inappropriate content or making unauthorized purchases becomes alarmingly real! ๐Ÿšจ To secure your app, update to the latest version of Boomerang as soon as a patch is released. Educate parents to regularly check for updates and monitor app settings. ๐Ÿ›ก๏ธ You can tackle this issue! Stay informed and proactive, and your family safety will remain intact. You've got this! ๐Ÿ’ช

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01107 ยท 65.6th percentile
Published
2023-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    An issue was discovered in the Boomerang Parental Control application through 13.83 for Android
    cvelistv5