CVE-2023-27651

HIGH

Ego Studio SuperClean 1.1.5-1.1.9 - Privilege Escalation via Update Info Field

Title source: llm

Description

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info field of the _default_.xml file.

References (3)

Core 3

Core References

Product

http://www.egostudiogroup.com/

Product

https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download

Exploit, Third Party Advisory

https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27651/CVE%20detail.md

View Exploit ZIP pw:eip

Scores

CVSS v3 7.8

EPSS 0.0038

EPSS Percentile 29.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-269

Status published

Products (4)

egostudiogroup/super_clean 1.1.5

egostudiogroup/super_clean 1.1.9

egostudiogroup/superclean 1.1.5

egostudiogroup/superclean 1.1.9

Published Apr 14, 2023

Tracked Since Feb 18, 2026