A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.
oryginał ENCVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HMidnightblue Tetra\
APPMidnightblueburst
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2022-24401HIGH8.8ten sam produkt
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator....
CVE-2022-24402HIGH8.8ten sam produkt
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi...
CVE-2022-24403MEDIUM4.3ten sam produkt
The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C...
CVE-2022-24404MEDIUM5.9ten sam produkt
Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is emplo...