Vulnerability · Published Sep 1, 2023 · Assigned by lenovo

CVE-2022-3407

Medium 4.9

In plain English

A medium-severity security flaw in Motorola smartphones from Motorola Mobility. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.2%top 84.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

Affected products (as reported)

VendorProductVersions
Motorola Mobility Motorola smartphones Versions prior to 2022-11-01

Weakness: CWE-404 · Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

References