Security Advisory
CVE-2022-25833
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.