HIGH🇵🇱 Wersja polska

CVE-2022-26943

CVSS 8.8v3.1pub. 2023-10-19upd. 2024-11-21

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited boottime pool entropy, an adversary can derive the contents of the entropy pool by an exhaustive search of possible values, based on an observed authentication challenge. Second, an adversary can use knowledge of the entropy pool to predict authentication challenges. As such, the unit is vulnerable to CVE-2022-24400.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Motorola Mtm5400

    HW
    Motorola
    all versions

  • Motorola Mtm5400 Firmware

    OS
    Motorola
    all versions

  • Motorola Mtm5500

    HW
    Motorola
    all versions

  • Motorola Mtm5500 Firmware

    OS
    Motorola
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-26941CRITICAL9.6PL ✓same product

Format string RCE w firmware Motorola MTM5000 — komenda AT+CTGL

CVE-2022-26942HIGH8.2same product

The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environ...

CVE-2022-27813HIGH8.1same product

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-...

CVE-2024-23626CRITICAL9.0PL ✓same vendor

Command injection w parametrze SaveSysLogParams routera Motorola MR2600

CVE-2024-23627CRITICAL9.0PL ✓same vendor

Command injection w parametrze SaveStaticRouteIPv4Params routera Motorola MR2600