CVE-2022-48390
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 862
Summary
CVE-2022-48390 is a recently discovered vulnerability affecting telephony services. The issue stems from a missing permission check, which could be exploited by an attacker to escalate privileges locally. This vulnerability allows an unprivileged user to gain elevated access to the telephony service without requiring any additional execution privileges. This escalation of privilege could potentially lead to serious security implications, making it crucial for affected organizations to apply the necessary patches or mitigations promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android