I some cases, when the device is USB-tethered to a host PC, and the device is sharing its…
Priority LOW 22CWE-404Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-404.
Summary
I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00241 15th percentileScored 2026-11-07
Fix Fixed Motorola smartphones (Motorola Mobility): 2022-11-01
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Motorola Mobility | Motorola smartphones | before 2022-11-01 | 2022-11-01 | Patch available | CNA |
- Motorola smartphones VendorMotorola Mobility Affected before 2022-11-01 Fixed in 2022-11-01 Patch available CNA
Remediation
- Fix · CNA Motorola smartphones (Motorola Mobility) Fixed in 2022-11-01
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3407
- 2026-10-03 Alias added: GHSA-h364-697w-mgpc
References
Sources
- CVE-2022-3407 · CVE Program
- CVE-2022-3407 · NVD
- FIRST EPSS
- GHSA-h364-697w-mgpc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences