Vulnerability in Kiddoware

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.

EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

References

Frequently asked questions

What is CVE-2023-28153?
CVE-2023-28153 is a medium-severity vulnerability in Kiddoware. CVSS score: 6.4/10. Published 2023-05-29.
How severe is CVE-2023-28153?
Medium severity. CVSS v3 base score is 6.4 out of 10.