CVE-2023-49002

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 27, 2023
Updated: Jan 5, 2024

Summary

CVE-2023-49002 is a vulnerability affecting Xenom Technologies' sinous Phone Dialer-voice Call Dialer version 1.2.5. This issue allows an attacker to bypass access restrictions within the OutgoingActivity of the com.funprime.calldialer.ui.activities package. By interacting with this component, an attacker can potentially gain unauthorized access to functionalities that were intended to be restricted. This vulnerability poses a significant risk to users, as it could lead to potential privacy invasions or unauthorized usage of the affected application. It is strongly recommended that users upgrade to the latest version of the Phone Dialer-voice Call Dialer software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share