CVE-2022-3407

Summary

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

Affected Software

VendorProductVersion RangeStatus
Motorola MobilityMotorola smartphonesVersions prior to 2022-11-01affected

Weaknesses

  • CWE-404: CWE-404 Improper Resource Shutdown or Release

Workarounds

Disconnect device from host PC when making phone calls.

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References