Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-3407

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if…

Medium4.9EPSS 0.24%
Published
Updated
Reserved
Assigned by
lenovo

Description

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing emergency services. This patch resolves the device's modem reset issue.

Scores

CVSS scores of CVE-2022-3407, by who scored it
Scored byCVSSScoreVector
lenovoCNA (assigner)3.1Medium4.9CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
NVDNVD · Modified3.1Medium4.3CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.24% · top 85% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.9.

Weakness

Affected products

What to do

Solution: Update your product to a software version with an SPL of 2022-11-01 or later.

Workaround: Disconnect device from host PC when making phone calls.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-3407 badge
[![CVE-2022-3407](https://trackcve.app/badge/CVE-2022-3407.svg)](https://trackcve.app/cve/CVE-2022-3407)

Record last updated .