CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages

published June 15, 2022

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

⚠️ A parsing bug could turn your modem into a no-show! When a new NAS message arrives, a glitch in the code might allow attackers to crash the modem remotely, leading to a potential Denial of Service (DoS). Think of your modem like a restaurant. When the kitchen gets a confusing order (the NAS message), a misunderstanding can lead to a total kitchen meltdown, serving up empty plates instead of delicious meals. 🍽️ If an attacker exploits this vulnerability, they could remotely cause your modem to crash, leading to service interruptions and possible Denial of Service (DoS). This issue could destabilize the connection, leaving you without internet when you need it most!

Put simply

Think of your modem like a restaurant. When the kitchen gets a confusing order (the NAS message), a misunderstanding can lead to a total kitchen meltdown, serving up empty plates instead of delicious meals. 🍽️ CVE-2022-20210 is a vulnerability in the modem’s NAS message parsing code, which, if exploited, could allow an attacker to crash the modem remotely. This can result in Denial of Service or even potentially remote code execution under certain conditions.

What to do

If an attacker exploits this vulnerability, they could remotely cause your modem to crash, leading to service interruptions and possible Denial of Service (DoS). This issue could destabilize the connection, leaving you without internet when you need it most! To protect yourself, ensure your Android SoC is updated to the latest firmware version that addresses this vulnerability. Additionally, monitor your network for unusual activity and consider implementing firewall rules to restrict access. You've got this! With these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04328 · 91.1th percentile
Published
2022-06-15T13:03Z
EPSS history
Timeline
  • 15 JUN 13:03Z
    The UE and the EMM communicate with each other using NAS messages
    cvelistv5