EUVD-2025-200173Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689251; Issue ID: MSV-4840.
Analysis
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689251; Issue ID: MSV-4840.
Technical ContextAI
A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users.
RemediationAI
Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.
In Modem, there is a possible information disclosure due to incorrect error handling. Rated high severity (CVSS 7.5), th
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,
A missing bounds check in the Modem component affecting Nr17r, Nr16, Nr15, and Nr17 devices enables remote denial of ser
Improper input validation in Modem firmware (Nr16, Nr15, Nr17r, Nr17) enables remote denial of service attacks when devi
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i
Nr15 versions up to - is affected by allocation of resources without limits or throttling (CVSS 6.5).
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service
Modem firmware versions Nr15, Nr16, Nr17, and Nr17r are susceptible to denial of service attacks due to insufficient bou
Improper error handling in the modem component of Nr15, Nr16, and Nr17 devices enables denial of service attacks when a
In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of se
Denial of service attacks against Nr15, Nr16, and Nr17 modems are possible through improper input validation when a devi
In Modem, there is a possible permission bypass due to improper certificate validation. Rated medium severity (CVSS 5.7)
Same weakness CWE-248 – Uncaught Exception
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today