Lucene search

[email protected]CVE-2023-49002

HistoryDec 27, 2023 - 10:15 p.m.

CVE-2023-49002

2023-12-2722:15:16

[email protected]

web.nvd.nist.gov

xenom technologies

sinous

phone dialer

voice call dialer

security vulnerability

access restrictions

bypass

nvd

cve-2023-49002

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

An issue in Xenom Technologies (sinous) Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity.

Affected configurations

NVD

Node

xenomtechnologiesphone_dialer-voice_call_dialerMatch1.2.5android

CPENameOperatorVersion
xenomtechnologies:phone_dialer-voice_call_dialerxenomtechnologies phone dialer-voice call dialereq1.2.5

CPE	Name	Operator	Version
xenomtechnologies:phone_dialer-voice_call_dialer	xenomtechnologies phone dialer-voice call dialer	eq	1.2.5

References

github.com/actuator/com.sinous.voice.dialer/blob/main/CWE-928.md

github.com/actuator/cve/blob/main/CVE-2023-49002

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

Related for CVE-2023-49002

cvelist1 prion1 nvd1