3335 matches found
CVE-2024-20015
CVE-2024-20015 involves a permissions bypass in the telephony stack that can enable local privilege escalation with no user interaction. Documentation across sources (NVD, Red Hat, CVE lists) notes a local-privilege escalation impact and identifies a patch/Issue ID: ALPS08441419. The exact affect...
CVE-2024-20015
In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Issue ID: ALPS08441419...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a privilege bypass issue in the telephony module, which could lead to privilege escalation...
The vulnerability of the Windows Telephony Server server allows attackers to increase their privileges.
The vulnerability of the Windows Telephony Server server for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2023-49786
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when...
CVE-2023-49294
CVE-2023-49294 affects Asterisk: read arbitrary files when live_dangerously is not enabled. Affected versions are pre-18.20.1, pre-20.5.1, pre-21.0.1, and certified-asterisk before 18.9-cert6. The issue has a fix in 18.20.1, 20.5.1, 21.0.1, and certified-asterisk from 18.9-cert6 onward. Public ma...
CVE-2023-49294 Asterisk Path Traversal vulnerability
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...
CVE-2023-49294 Asterisk Path Traversal vulnerability
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...
CVE-2023-49294
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...
CVE-2023-36005
Windows Telephony Server Elevation of Privilege Vulnerability...
CVE-2023-36005
Windows Telephony Server Elevation of Privilege Vulnerability...
CVE-2023-36005
Windows Telephony Server Elevation of Privilege Vulnerability...
Privilege escalation
Windows Telephony Server Elevation of Privilege Vulnerability...
CVE-2023-36005 Windows Telephony Server Elevation of Privilege Vulnerability
...
CVE-2023-36005
CVE-2023-36005 is documented in connected sources as a Windows Telephony Server Elevation of Privilege vulnerability with a base impact of obtaining increased privileges. The NC SC advisory lists the CVE with a base CVSS-like rating of 7.5 (HIGH) and notes a network-associated context, but the pr...
Windows Telephony Server Elevation of Privilege Vulnerability
...
Microsoft Windows Telephony Server Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Telephony Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...
CVE-2023-36005: Sensitive Data Storage in Improperly Locked Memory
Windows Telephony Server Elevation of Privilege Vulnerability...
PT-2023-7775 · Microsoft · Windows Telephony Service +1
Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Telephony Server, which can be exploited by a remote attacker to elevate their privileges. This can...