Description
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed
Published: 2026-08-03
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the modem software enables an attacker to send crafted input that is not properly validated, causing the modem to become unresponsive. The vulnerability does not grant the attacker any privileges beyond original access, but it can disrupt network connectivity for the affected device.

Affected Systems

Unisoc (Shanghai) Technologies Co., Ltd. devices based on the T8100, T9100, T8200, and T8300 series. No specific firmware or software versions were disclosed, so all current releases for these models should be considered vulnerable until a vendor update is available.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity. The EPSS score is <1%, indicating a very low exploitation probability. The vulnerability is not in CISA’s KEV catalog. The likely attack vector is remote; an attacker can trigger the denial of service by sending malformed data over the modem’s control interface without requiring additional privileges.

Generated by OpenCVE AI on August 4, 2026 at 21:39 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor’s latest firmware release that corrects the input validation logic.
  • If a patch is not immediately available, disable or restrict the modem’s remote control interface to prevent external access.
  • Monitor modem logs and network traffic for signs of malformed packets that could indicate an active exploitation attempt.

Generated by OpenCVE AI on August 4, 2026 at 21:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Unisoc
Unisoc t8100
Unisoc t8200
Unisoc t8300
Unisoc t9100
Vendors & Products Unisoc
Unisoc t8100
Unisoc t8200
Unisoc t8300
Unisoc t9100

Tue, 04 Aug 2026 22:00:00 +0000

Type Values Removed Values Added
Title Improper Input Validation in Unisoc Modem Allows Remote Denial of Service

Mon, 03 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 03 Aug 2026 08:00:00 +0000

Type Values Removed Values Added
Description In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Unisoc T8100 T8200 T8300 T9100
cve-icon MITRE

Status: PUBLISHED

Assigner: Unisoc

Published:

Updated: 2026-08-03T14:25:44.241Z

Reserved: 2025-12-31T07:33:23.119Z

Link: CVE-2026-21549

cve-icon Vulnrichment

Updated: 2026-08-03T14:25:37.494Z

cve-icon NVD

Status : Received

Published: 2026-08-03T08:17:19.537

Modified: 2026-08-03T16:16:29.323

Link: CVE-2026-21549

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T12:02:03Z

Weaknesses
  • CWE-20

    Improper Input Validation