CVE-2023-30682

Summary

CVE-2023-30682 is a new vulnerability affecting Telecom software. This issue involves improper access control, allowing local attackers to invoke the silenceRinger API unauthorized. Successful exploitation could enable an attacker to silence phone calls without permission from the intended user. The impact of this vulnerability is significant for telecommunications providers, as it could lead to privacy breaches and potential security risks for their customers. The affected software is reported to be prior to the SMR Aug-2023 Release 1. Telecom is advised to apply the necessary patches or updates to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.