cve-2026-79405

HIGH CVSS 7.5 fkie_nvd
Description

Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Affected Products

No product information available.

Weaknesses (CWE)
CWE-20
CVSS metrics
Version Base Severity Vector Exploitability Impact Source
3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 3.9 3.6 security@unisoc.com
NVD metadata
NVD status
Received
Source identifier
security@unisoc.com
References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Modem",
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "UDX710"
            }
          ]
        }
      ],
      "source": "security@unisoc.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Transient DOS when processing a malformed NR RRC configuration message due to improper input validation."
    }
  ],
  "id": "CVE-2026-79405",
  "lastModified": "2026-11-05T07:17:27.450",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "security@unisoc.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-79405",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-11-04T14:53:50.627398Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-11-04T04:17:37.480",
  "references": [
    {
      "source": "security@unisoc.com",
      "url": "https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937"
    }
  ],
  "sourceIdentifier": "security@unisoc.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "security@unisoc.com",
      "type": "Secondary"
    }
  ]
}
View JSON API Download JSON