CVE-2022-3407

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-3407", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "state": "PUBLISHED", "assignerShortName": "lenovo", "dateReserved": "2022-10-06T20:03:25.481Z", "datePublished": "2023-09-01T16:42:00.677Z", "dateUpdated": "2024-09-27T18:35:19.163Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["modem"], "platforms": ["Android"], "product": "Motorola smartphones", "vendor": "Motorola Mobility", "versions": [{"status": "affected", "version": "Versions prior to 2022-11-01"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Device must be USB-tethered to host PC"}], "value": "Device must be USB-tethered to host PC"}], "datePublic": "2023-01-01T06:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue."}], "value": "I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-404", "description": "CWE-404 Improper Resource Shutdown or Release", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2023-09-01T16:42:00.677Z"}, "references": [{"url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update your product to a software version with an SPL of 2022-11-01 or later."}], "value": "Update your product to a software version with an SPL of 2022-11-01 or later."}], "source": {"discovery": "UNKNOWN"}, "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Disconnect device from host PC when making phone calls."}], "value": "Disconnect device from host PC when making phone calls."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:07:06.521Z"}, "title": "CVE Program Container", "references": [{"url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-27T18:01:20.858707Z", "id": "CVE-2022-3407", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-27T18:35:19.163Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T01:07:06.521Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-3407", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-27T18:01:20.858707Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-27T18:35:12.455Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Motorola Mobility", "modules": ["modem"], "product": "Motorola smartphones", "versions": [{"status": "affected", "version": "Versions prior to 2022-11-01"}], "platforms": ["Android"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update your product to a software version with an SPL of 2022-11-01 or later.", "supportingMedia": [{"type": "text/html", "value": "Update your product to a software version with an SPL of 2022-11-01 or later.", "base64": false}]}], "datePublic": "2023-01-01T06:00:00.000Z", "references": [{"url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354"}], "workarounds": [{"lang": "en", "value": "Disconnect device from host PC when making phone calls.", "supportingMedia": [{"type": "text/html", "value": "Disconnect device from host PC when making phone calls.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.", "supportingMedia": [{"type": "text/html", "value": "I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "CWE-404 Improper Resource Shutdown or Release"}]}], "configurations": [{"lang": "en", "value": "Device must be USB-tethered to host PC", "supportingMedia": [{"type": "text/html", "value": "Device must be USB-tethered to host PC", "base64": false}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2023-09-01T16:42:00.677Z"}}}, "cveMetadata": {"cveId": "CVE-2022-3407", "state": "PUBLISHED", "dateUpdated": "2024-09-27T18:35:19.163Z", "dateReserved": "2022-10-06T20:03:25.481Z", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "datePublished": "2023-09-01T16:42:00.677Z", "assignerShortName": "lenovo"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["modem"], "platforms": ["Android"], "product": "Motorola smartphones", "vendor": "Motorola Mobility", "versions": [{"status": "affected", "version": "Versions prior to 2022-11-01"}]}], "source": "psirt@lenovo.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:motorola:smartphone_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BB355F3-BD13-4DCF-AE42-4D6D4813AC9C", "versionEndExcluding": "2022-11-01", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue."}, {"lang": "es", "value": "En algunos casos, cuando el dispositivo est\u00e1 conectado por USB a un PC host y comparte su conexi\u00f3n de red m\u00f3vil con el PC host, si el usuario realiza una llamada desde el dispositivo, el m\u00f3dem de \u00e9ste puede reiniciarse y hacer que la llamada no se realice correctamente. Esto puede impedir que el usuario llame a los servicios de emergencia. Es parche resuelve el problema del reinicio del m\u00f3dem del dispositivo. "}], "id": "CVE-2022-3407", "lastModified": "2026-06-17T04:59:28.093", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 4.0, "source": "psirt@lenovo.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.7, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-3407", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-27T18:01:20.858707Z", "version": "2.0.3"}}]}, "published": "2023-09-01T17:15:07.463", "references": [{"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://en-us.support.motorola.com/app/answers/detail/a_id/175354"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}], "source": "psirt@lenovo.com", "type": "Secondary"}]}

{}

{}