CVE-2022-3407

Severity Score

4.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

En algunos casos, cuando el dispositivo está conectado por USB a un PC host y comparte su conexión de red móvil con el PC host, si el usuario realiza una llamada desde el dispositivo, el módem de éste puede reiniciarse y hacer que la llamada no se realice correctamente. Esto puede impedir que el usuario llame a los servicios de emergencia. Es parche resuelve el problema del reinicio del módem del dispositivo.

*Credits: N/A

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-10-06 CVE Reserved
2023-09-01 CVE Published
2023-09-09 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-404: Improper Resource Shutdown or Release

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://en-us.support.motorola.com/app/answers/detail/a_id/175354	2023-09-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Motorola Search vendor "Motorola"		Smartphone Firmware Search vendor "Motorola" for product "Smartphone Firmware"				< 2022-11-01 Search vendor "Motorola" for product "Smartphone Firmware" and version " < 2022-11-01"		-		Affected