What is CVE-2023-29733?

CVE-2023-29733 is a high-severity vulnerability in Dualspace Lock Master, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2023-05-30.

How severe is CVE-2023-29733?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Dualspace Lock Master

CVE-2023-29733

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a severe escalation of privilege attack.

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Dualspace Lock_master — versions 2.2.4
N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-29733?: CVE-2023-29733 is a high-severity vulnerability in Dualspace Lock Master, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2023-05-30.
How severe is CVE-2023-29733?: High severity. CVSS v3 base score is 7.8 out of 10.