MEDIUMπŸ‡΅πŸ‡± Wersja polska

CVE-2022-24403

CVSS 4.3v3.1pub. 2023-12-05upd. 2024-11-21

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  • Midnightblue Tetra\

    APP
    Midnightblue
    burst
πŸ”΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-24400HIGH7.5ten sam produkt

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t...

CVE-2022-24401HIGH8.8ten sam produkt

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator....

CVE-2022-24402HIGH8.8ten sam produkt

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi...

CVE-2022-24404MEDIUM5.9ten sam produkt

Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is emplo...

CVE-2022-24403 β€” Midnightblue β€” Tetra\ β€” MEDIUM β€” CVSS 4.3 | CVEbaza.pl