Vulnerability · Published Jul 31, 2024 · Assigned by lenovo

CVE-2022-4003

Low 2.7

In plain English

A low-severity uncontrolled resource consumption in Q14 Mesh Router Firmware from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.4%top 66.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request.

Affected products (as reported)

VendorProductVersions
Motorola Q14 Mesh Router Firmware 0 – before 1.5.0.16

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

References