Yeah, SS7 was not really designed for the scenarios it now finds itself in (hell, I remember my dad talking to me about it back in the 80's). It's amazing how well it works, but that's exactly the context where one expects to find security vulnerabilities in spades.
https://en.wikipedia.org/wiki/Signalling_System_No._7