PT-2023-28558 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure, with System execution privileges needed...

PT-2023-28556 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges neede...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

PT-2023-28555 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges neede...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the telephony service...

The vulnerability of the ajaxHandler function (ucp/Cdr.class.php) in the web interface for managing IP telephony systems FreePBX allows a hacker to execute arbitrary SQL commands.

The vulnerability of the ajaxHandler function ucp/Cdr.class.php in the web interface for managing IP telephony systems called FreePBX is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL comman...

PT-2023-9644 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21373

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21373

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Privilege escalation

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Information disclosure

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21376

CVE-2023-21376 affects Android Telephony and is described as a logic error that allows local information disclosure by retrieving the ICCID without requiring user interaction. The primary impact is information disclosure with a high confidentiality impact and no demonstrated exploitation details ...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21376

In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...