nvd-json-data-feeds/CVE-2023/CVE-2023-383xx/CVE-2023-38302.json

{
  "id": "CVE-2023-38302",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-04-22T15:15:47.313",
  "lastModified": "2024-04-22T19:24:06.727",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A certain software build for the Sharp Rouvo V device (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:user/release-keys) leaks the Wi-Fi MAC address and the Bluetooth MAC address to system properties that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable device identifiers in Android 10 and higher, but in this instance they are leaked by a high-privilege process and can be obtained indirectly. This malicious app reads from the \"ro.boot.wifi_mac\" system property to indirectly obtain the Wi-Fi MAC address and reads the \"ro.boot.bt_mac\" system property to obtain the Bluetooth MAC address."
    },
    {
      "lang": "es",
      "value": "Cierta compilaci\u00f3n de software para el dispositivo Sharp Rouvo V (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:user/release-keys) filtra la direcci\u00f3n MAC de Wi-Fi y la direcci\u00f3n MAC de Bluetooth a las propiedades del sistema a las que se puede acceder por cualquier aplicaci\u00f3n local en el dispositivo sin ning\u00fan permiso o privilegio especial. Google restringi\u00f3 que las aplicaciones de terceros obtengan directamente identificadores de dispositivos no reiniciables en Android 10 y versiones posteriores, pero en este caso se filtran mediante un proceso de alto privilegio y se pueden obtener indirectamente. Esta aplicaci\u00f3n maliciosa lee la propiedad del sistema \"ro.boot.wifi_mac\" para obtener indirectamente la direcci\u00f3n MAC de Wi-Fi y lee la propiedad del sistema \"ro.boot.bt_mac\" para obtener la direcci\u00f3n MAC de Bluetooth."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Ryan%20Johnson%20Mohamed%20Elsabagh%20Angelos%20Stavrou%20-%20Still%20Vulnerable%20Out%20of%20the%20Box%20Revisiting%20the%20Security%20of%20Prepaid%20Android%20Carrier%20Devices.pdf",
      "source": "cve@mitre.org"
    }
  ]
}