Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:LMidnightblue Tetra\
APPMidnightblueburst
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-24400HIGH7.5ten sam produkt
A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t...
CVE-2022-24401HIGH8.8ten sam produkt
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator....
CVE-2022-24402HIGH8.8ten sam produkt
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi...
CVE-2022-24403MEDIUM4.3ten sam produkt
The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C...