CVE-2007-1823

T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification (CNID…

published April 2, 2007

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

🚨 With a simple Caller ID spoof, attackers can take control of T-Mobile voicemail systems like a sneaky imposter slipping into a party. 🎭 Think of it as someone crashing a family reunion, pretending to be a trusted relative to access private messages. They can read, delete, or even change settings in your voicemail box without a hitch! If exploited, an attacker could retrieve sensitive voice messages, remove important ones, or reconfigure mailbox settings, leaving victims unaware of critical communications. This could lead to missed messages or even identity theft—absolutely devastating!

Put simply

Think of it as someone crashing a family reunion, pretending to be a trusted relative to access private messages. They can read, delete, or even change settings in your voicemail box without a hitch! This vulnerability allows remote attackers to spoof Caller ID and gain unauthorized access to T-Mobile voicemail systems, enabling them to retrieve or modify messages.

What to do

If exploited, an attacker could retrieve sensitive voice messages, remove important ones, or reconfigure mailbox settings, leaving victims unaware of critical communications. This could lead to missed messages or even identity theft—absolutely devastating! T-Mobile users should ensure they have voicemail security features enabled, such as PIN protection, and consider changing their voicemail settings to minimize risks. Stay alert for any unusual activity and report suspicious incidents to your service provider. You've got this! Stay vigilant and keep your voicemail secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01975 · 80.3th percentile
Published
2007-04-02T23:00Z
EPSS history
Timeline
  • 02 APR 23:00Z
    T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification (CNID…
    cvelistv5