CVE-2025-31717
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.6%
exploitation probability
0.6%top 55% of all CVEs
observed exploitation
nono source reports it
In short
A modem can crash when it receives specially crafted network messages due to lack of proper input checking. An attacker can remotely cause the modem to stop working without needing any special access.
Technical detail
The vulnerability exists in the modem's input validation layer, allowing an unauthenticated remote attacker to send malformed packets that trigger a crash condition. The attack vector is network-based with no privilege escalation required, resulting in denial of service availability impact.
Summary generated and translated by AI from the official description.
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H