CVE-2026-20401CWE-617

In Modem, there is a possible system crash due to an uncaught exception

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

⚠️ A rogue base station could send your system tumbling down without even needing a password — it’s like an uninvited guest crashing your party! Imagine a party crasher who just needs to walk through the door to cause chaos in the venue. This vulnerability allows an attacker to trigger a system crash without needing any special permissions or user interaction, similar to a party where the bouncer is asleep at the door. If connected to a malicious base station, your system could experience a denial of service, causing it to become unresponsive. This means your essential services could go offline, leading to disruptions that might affect communication and connectivity.

Put simply

Imagine a party crasher who just needs to walk through the door to cause chaos in the venue. This vulnerability allows an attacker to trigger a system crash without needing any special permissions or user interaction, similar to a party where the bouncer is asleep at the door. This vulnerability in Modem arises from an uncaught exception that can trigger a system crash when a user equipment (UE) connects to a rogue base station, allowing for a remote denial of service with no execution privileges required.

What to do

If connected to a malicious base station, your system could experience a denial of service, causing it to become unresponsive. This means your essential services could go offline, leading to disruptions that might affect communication and connectivity. Patch your systems with ID MOLY01738310 immediately to mitigate the risk. Regularly monitor for rogue base stations in your network and implement security measures to avoid unauthorized access. Don’t forget to update your incident response protocols! You've got this! With these steps, you can fortify your defenses and keep your systems running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00726 · 53.6th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to an uncaught exception
    cvelistv5