SECURITY ADVISORY DOSSIER
CVE-2022-34011
CVSS 8.2HIGH
SS7 MAP SendRoutingInfoForSM Subscriber Location Tracking
Vulnerability Overview
Flaws in SS7 Mobile Application Part (MAP) signaling handling allow remote attackers to issue fake SendRoutingInfoForSM requests to obtain cell global identifiers (CGI) and track subscriber location worldwide.
Affected Telecom Components
⚡ SS7 MAP ⚡ HLR/HSS Interface ⚡ ISUP Interconnect ⚡ STP Router
Recommended Mitigation Guidelines
Deploy Category 1/2/3 SS7 Firewalls with velocity checking, IMSI-to-MSISDN validation, and SRI filtering.