CVE-2023-30866
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jun 6, 2023
Updated: Jan 8, 2025
CWE ID 862
Summary
CVE-2023-30866 is a vulnerability affecting telephony services where a crucial permission check is missing. An attacker exploiting this issue can gain local access to sensitive information without requiring any extra execution privileges. This flaw poses a significant risk to data confidentiality, underscoring the importance of timely updates and patches to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android