SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-3407

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed.

MEDIUM 4.3EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

CVSS 3.1
4.3 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.24% probability · 15th percentile
CISA KEV
Not listed
Weakness
CWE-404
Affected
motorola/smartphone firmware
Source
psirt@lenovo.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.