Vulnerability in pppscn SmsForwarder

[ Description ]Official description

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or overwrite configuration via the clone API.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/pppscn/SmsForwarder
• github.com/pppscn/SmsForwarder/blob/v3.5.0/app/src/main/kotlin/cn/ppps/forwarder/server…
• github.com/pppscn/SmsForwarder/blob/v3.5.0/app/src/main/kotlin/cn/ppps/forwarder/utils/…
• hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/H1ue_ahiMe
• www.vulncheck.com/advisories/smsforwarder-through-3.5.0-missing-authentication-in-http-…