Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.
oryginał ENCVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:LMidnightblue Tetra\
APPMidnightblueburst
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2022-24400HIGH7.5ten sam produkt
A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t...
CVE-2022-24401HIGH8.8ten sam produkt
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator....
CVE-2022-24402HIGH8.8ten sam produkt
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi...
CVE-2022-24403MEDIUM4.3ten sam produkt
The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C...