CVE-2023-33900

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jul 12, 2023
Updated: Jul 18, 2023
CWE ID 862

Summary

CVE-2023-33900 is a vulnerability affecting telephony services where a crucial permission check is missing. This oversight can permit unauthorized access to local information without the need for extra execution privileges. An attacker can potentially exploit this issue and gain insight into confidential data, posing a security risk to the affected system. The vulnerability requires further investigation to assess its potential impact and develop appropriate mitigations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share