CVE-2023-22362: SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaini

This month

HIGH 7.5REMOTEDOWNGRADEDOWNGRADEDOWNGRADE

CVE-2023-22362 is a high-severity flaw (CVSS 7.5) affecting hong kong sushiro, singapore sushiro, sushiro. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1

Why this priority

High severity
Remotely exploitable, no login, no user action

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.5 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	0.8% (top 44%)
CISA exploited list	No
Weakness	CWE-532
Published	2023-02-13
Last modified	2026-06-17

Publisher (CNA): JPCERT/CC · Vendor: akindo-sushiro

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-02-13 02:21 UTCPublished CVE record published
2026-06-17 05:35 UTCUpdated Record last modified

akindo-sushiro hong kong sushiro DOWNGRADE

Affected: 3.0.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.0.3

1. Check installed version

apt-cache policy hong-kong-sushiro || rpm -q hong-kong-sushiro || hong-kong-sushiro --version

2. No fixed release: DOWNGRADE to a release before 3.0.3 (Debian / Ubuntu)

apt-cache madison hong-kong-sushiro sudo apt install hong-kong-sushiro=<VERSION_BEFORE_3.0.3> sudo apt-mark hold hong-kong-sushiro

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list hong-kong-sushiro sudo dnf downgrade hong-kong-sushiro-<VERSION_BEFORE_3.0.3> sudo dnf versionlock add hong-kong-sushiro

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

akindo-sushiro singapore sushiro DOWNGRADE

Affected: 2.0.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.0.3

1. Check installed version

apt-cache policy singapore-sushiro || rpm -q singapore-sushiro || singapore-sushiro --version

2. No fixed release: DOWNGRADE to a release before 2.0.3 (Debian / Ubuntu)

apt-cache madison singapore-sushiro sudo apt install singapore-sushiro=<VERSION_BEFORE_2.0.3> sudo apt-mark hold singapore-sushiro

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list singapore-sushiro sudo dnf downgrade singapore-sushiro-<VERSION_BEFORE_2.0.3> sudo dnf versionlock add singapore-sushiro

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

akindo-sushiro sushiro DOWNGRADE

Affected: 4.0.31

Fixed in: no fixed release known

Safe to downgrade to: a release before 4.0.31

1. Check installed version

apt-cache policy sushiro || rpm -q sushiro || sushiro --version

2. No fixed release: DOWNGRADE to a release before 4.0.31 (Debian / Ubuntu)

apt-cache madison sushiro sudo apt install sushiro=<VERSION_BEFORE_4.0.31> sudo apt-mark hold sushiro

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list sushiro sudo dnf downgrade sushiro-<VERSION_BEFORE_4.0.31> sudo dnf versionlock add sushiro

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

akindo-sushiro taiwan sushiro DOWNGRADE

Affected: 2.0.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.0.3

1. Check installed version

apt-cache policy taiwan-sushiro || rpm -q taiwan-sushiro || taiwan-sushiro --version

2. No fixed release: DOWNGRADE to a release before 2.0.3 (Debian / Ubuntu)

apt-cache madison taiwan-sushiro sudo apt install taiwan-sushiro=<VERSION_BEFORE_2.0.3> sudo apt-mark hold taiwan-sushiro

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list taiwan-sushiro sudo dnf downgrade taiwan-sushiro-<VERSION_BEFORE_2.0.3> sudo dnf versionlock add taiwan-sushiro

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

akindo-sushiro thailand sushiro DOWNGRADE

Affected: 2.0.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.0.3

1. Check installed version

apt-cache policy thailand-sushiro || rpm -q thailand-sushiro || thailand-sushiro --version

2. No fixed release: DOWNGRADE to a release before 2.0.3 (Debian / Ubuntu)

apt-cache madison thailand-sushiro sudo apt install thailand-sushiro=<VERSION_BEFORE_2.0.3> sudo apt-mark hold thailand-sushiro

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list thailand-sushiro sudo dnf downgrade thailand-sushiro-<VERSION_BEFORE_2.0.3> sudo dnf versionlock add thailand-sushiro

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-22362?

hong kong sushiro: downgrade or apply the listed mitigation; singapore sushiro: downgrade or apply the listed mitigation; sushiro: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2023-22362 being exploited?

CVE-2023-22362 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-22362 affect?

CVE-2023-22362 affects hong kong sushiro, singapore sushiro, sushiro. Severity is high (CVSS 7.5). SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver

How urgent is CVE-2023-22362?

Priority 45/100. High severity; Remotely exploitable, no login, no user action

Software pages

Android vulnerabilities

References

← Back to latest CVEs