CVE-2022-3407

Published Sep 1, 2023

Last updated a year ago

CVSS medium 4.3

Overview

Description: I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.
Source: psirt@lenovo.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 4.3
Impact score: 3.6
Exploitability score: 0.7
Vector string: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

psirt@lenovo.com: CWE-404

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:motorola:smartphone_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0BB355F3-BD13-4DCF-AE42-4D6D4813AC9C",
            "versionEndExcluding": "2022-11-01"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References