CVE-2022-3407 MEDIUM

CVE-2022-3407

Vendor Motorola Mobility
Product Motorola smartphones
Weakness CWE-404
Published September 1, 2023
Last update September 27, 2024

CVSS base score

4.9/10
Attack vector Physical
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

Key dates

02Disclosure timeline

September 1, 2023 CVE published
September 27, 2024 Record updated