CVE-2022-48445

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jun 6, 2023
Updated: Jan 7, 2025
CWE ID 862
CWE ID 476

Summary

CVE-2022-48445 is a vulnerability affecting telephony services, where a missing permission check exists. This issue permits an attacker to cause a local denial of service without requiring any additional execution privileges. By exploiting this flaw, attackers can disrupt the normal functioning of the telephony service, potentially impacting communication systems significantly. The vulnerability poses a risk to confidentiality, integrity, and availability of affected telephony services, necessitating prompt mitigation measures.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share