CVE-2023-30654

Summary

CVE-2023-30654 is an access control vulnerability that affects SLocationService prior to the SMR Aug-2023 Release 1. This issue permits a local attacker to manipulate location data, allowing them to update fake location information. The vulnerability occurs due to insufficient access controls within the service, enabling unauthorized modifications. The consequence of this flaw could lead to misrepresentation of actual locations and potential security risks. Users are advised to install the latest patch to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.