The vulnerability stems from an improper input validation in the Unisoc UDX710 modem, allowing crafted inputs to be processed without proper checks. This flaw can cause the modem to crash or become unresponsive, effectively denying service to legitimate users. The primary impact is a disruption of network connectivity and associated services, with no need for elevated privileges to exploit the weakness.

Vendors impacted are Unisoc (Shanghai) Technologies Co., Ltd., specifically the UDX710 modem. No version details are provided in the data, so all current UDX710 devices should be considered vulnerable until a patch is released.

The vulnerability scores a CVSS of 7.5, indicating a high severity level. The EPSS score is very low (<1%), suggesting that exploitation is not widely observed, but the flaw remains significant due to its high impact. The issue is not listed in CISA’s KEV catalog. The likely attack vector is remote, achieved by sending malformed or oversized inputs over the network interface that the modem exposes. No additional execution privileges are required, meaning an attacker could trigger a denial of service from distance without compromising the host.