PT-2023-22881 · Telecom · Telecom

Balance · Publicado 2023-08-10 · Atualizado 2023-08-14 · CVE-2023-30683

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Telecom versions prior to SMR Aug-2023 Release 1

Description The issue is related to improper access control, allowing local attackers to call the "endCall API" without permission. This can be exploited by attackers to potentially disrupt or manipulate call functionality.

Recommendations For versions prior to SMR Aug-2023 Release 1, consider restricting access to the "endCall API" until a patch is available. As a temporary workaround, disabling the API or limiting its functionality can help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2023-30683

Produtos afetados

Telecom

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-30683 · Aviso do Fabricante
• https://t.me/cibsecurity/68157 · Publicação no Telegram
• https://t.me/cvenotify/56422 · Publicação no Telegram
• https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30683 · Nota de Segurança