Technical impact
The vulnerability is an improper input validation flaw in the modem firmware of Unisoc UDX710 devices that can lead to remote denial of service. The flaw allows an attacker to send malformed or malicious input that causes the modem to crash or reset, interrupting network services. The attack vector is not explicitly stated, but based on the description it is inferred that the flaw is exploitable through a remote interface that accepts user‑supplied data.
Affected Systems
Affected devices are Unisoc (Shanghai) Technologies Co., Ltd. modem devices running the UDX710 firmware. Specific firmware versions are not listed in the vulnerability report, so the impact applies to all versions of the UDX710 that contain the unpatched code.
Risk and Exploitability
The CVSS base score of 7.5 indicates a high-level severity, and the EPSS score of 0.00403 indicates a very low probability of exploitation. The vulnerability is not included in the CISA KEV catalog. Exploitation appears to require remote access to the modem's input interface; no additional privileges are needed, making it easier to target. Because the flaw directly disrupts service availability, the risk to organizations that rely on the impacted modems includes service downtime and potential cascading effects on dependent systems. While no publicly disclosed exploits are known, the high severity warrants timely patching or mitigation.
