Lucene search

K
cve[email protected]CVE-2022-3407
HistorySep 01, 2023 - 5:15 p.m.

CVE-2022-3407

2023-09-0117:15:07
CWE-404
web.nvd.nist.gov
20
cve-2022-3407
device security
usb-tethering
modem reset
emergency services
nvd

4.9 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device’s modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device’s modem reset issue.

Affected configurations

NVD
Node
motorolasmartphone_firmwareRange<2022-11-01

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "modem"
    ],
    "platforms": [
      "Android"
    ],
    "product": "Motorola smartphones",
    "vendor": "Motorola Mobility",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 2022-11-01"
      }
    ]
  }
]

4.9 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

Related for CVE-2022-3407