Motorola Smartphone Firmware vulnerabilities

3 CVEs affecting Motorola Smartphone Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-41828, published 2024-05-03.

More from Motorola.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-3407, published 2023-09-01. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's…
• CVE-2023-41828, published 2024-05-03. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.  
• CVE-2023-41823, published 2024-05-03. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities.