This vulnerability in Eleveo Call Recording Software 9.7.0 allows remote attackers to bypass proper authorization controls in an unspecified function of the /callrec/statisticReportAction.do endpoint. The improper authorization flaw could enable unauthorized access or actions within the application. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low complexity, no privileges required, and no user interaction needed. The vendor has not issued any patch or official fix, and the exploit has been publicly disclosed.

Successful exploitation could allow remote attackers to perform unauthorized actions or access data within the Eleveo Call Recording Software 9.7.0 environment. The exact impact is not detailed, but improper authorization typically risks data confidentiality and integrity. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, organizations should consider implementing compensating controls such as restricting network access to the affected endpoint, monitoring for suspicious activity related to /callrec/statisticReportAction.do, and applying strict access controls until a patch is released.