Lucene search

K
cvelistLenovoCVELIST:CVE-2022-3407
HistorySep 01, 2023 - 4:42 p.m.

CVE-2022-3407

2023-09-0116:42:00
CWE-404
lenovo
www.cve.org
device modem reset
usb-tethered
call failure
emergency services

4.9 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device’s modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device’s modem reset issue.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "modem"
    ],
    "platforms": [
      "Android"
    ],
    "product": "Motorola smartphones",
    "vendor": "Motorola Mobility",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 2022-11-01"
      }
    ]
  }
]

4.9 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Related for CVELIST:CVE-2022-3407