CVE-2023-47889

Description

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-927 CWE-927

Affected Products

Vendor	Product	Versions
binhdrm26	super_reboot	All

References

Exploits

https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md

Frequently Asked Questions

What is CVE-2023-47889? +

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2023-47889? +

CVE-2023-47889 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2023-47889? +

CVE-2023-47889 affects products from binhdrm26, specifically: super_reboot. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-47889? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-48558 7.8

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to …

CVE-2024-3108 5.5

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire …

CVE-2023-41826 5.1

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact …

CVE-2023-41820 5.0

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read …

CVE-2023-41828 4.4

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported …

CVE-2023-41817 2.8

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read …