Mt2731
Vendor:
First CVE: Jan 4, 2022 · Active for 4 years
10
Total CVEs
More Total CVEs than 88% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mt2731 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 4, 2022
4 years ago
Most Recent CVE
Jul 1, 2024
753 days ago
CVE Severity & Scoring
Mt273110 CVEs
10%
10%
50%
30%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local2 (20.0%)
Network8 (80.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (90.0%)
Unknown0 (0.0%)
Required1 (10.0%)
Privileges Required
Low2 (20.0%)
High1 (10.0%)
None7 (70.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-21744CRITICAL In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) | Jul 6, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-20083CRITICAL In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additiona | Jul 6, 2022 | 9.8 | 32 | NO | NO |
CVE-2024-20039HIGH In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. U | Apr 1, 2024 | 8.8 | 25 | NO | NO |
CVE-2023-20819CRITICAL In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileg | Oct 2, 2023 | 9.8 | 24 | NO | NO |
CVE-2022-26446HIGH In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), w | Nov 8, 2022 | 7.5 | 24 | NO | NO |
CVE-2021-40148HIGH In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges | Jan 4, 2022 | 7.5 | 24 | NO | NO |
CVE-2024-20077HIGH In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interac | Jul 1, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-20076HIGH In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interac | Jul 1, 2024 | 7.5 | 22 | NO | NO |
CVE-2023-32840MEDIUM In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User | Nov 6, 2023 | 6.5 | 19 | NO | NO |
In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. | May 15, 2023 | 3.3 | 12 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Mt2731
Top CWEs
Versions
No cataloged versions.