CVE-2023-42736

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 4, 2023
Updated: Dec 7, 2023
CWE ID 862

Summary

CVE-2023-42736 is a new vulnerability affecting telecom services. The issue involves a missing permission check, allowing unauthorized local escalation of privilege without the need for additional execution privileges. This flaw could potentially be exploited by attackers to gain higher levels of access within the telecom system. The exact implications of this vulnerability depend on the specific telecom service and configuration, but it poses a significant risk to security. Organizations using affected telecom services are advised to apply patches or mitigations as soon as possible to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share