7.5

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00650610; Issue ID: MSV-2933.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
MediatekNr15 Version-
   MediatekMt2735 Version-
   MediatekMt6833 Version-
   MediatekMt6833p Version-
   MediatekMt6853 Version-
   MediatekMt6853t Version-
   MediatekMt6855 Version-
   MediatekMt6855t Version-
   MediatekMt6873 Version-
   MediatekMt6875 Version-
   MediatekMt6875t Version-
   MediatekMt6877 Version-
   MediatekMt6877t Version-
   MediatekMt6877tt Version-
   MediatekMt6880 Version-
   MediatekMt6883 Version-
   MediatekMt6885 Version-
   MediatekMt6889 Version-
   MediatekMt6890 Version-
   MediatekMt6891 Version-
   MediatekMt6893 Version-
   MediatekMt8666 Version-
   MediatekMt8667 Version-
   MediatekMt8673 Version-
   MediatekMt8675 Version-
   MediatekMt8771 Version-
   MediatekMt8791 Version-
   MediatekMt8791t Version-
   MediatekMt8795t Version-
   MediatekMt8797 Version-
   MediatekMt8798 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.14% 0.351
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.