CVE-2023-30683

Summary

CVE-2023-30683 is a newly identified access control vulnerability affecting Telecom software prior to the SMR Aug-2023 Release 1. This issue grants local attackers unauthorized access to the endCall API, enabling them to terminate calls without proper permission. This vulnerability poses a significant risk, as it can lead to call disruptions and potential privacy breaches. Attackers can exploit this flaw to disrupt ongoing communications, potentially causing business disruptions and user inconvenience. Telecom users are advised to update to the latest software release to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.