Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2022-24404

Ciphertext Malleability in TETRA

Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Midnightblue
Products
Tetra\
CVE-2022-24403

De-anonymization attack in TETRA

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Midnightblue
Products
Tetra\
CVE-2022-24402

Intentionally weakened effective strength in TETRA TEA1

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Midnightblue
Products
Tetra\
CVE-2022-24401

Keystream recovery for arbitrary frames in TETRA

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By sending crafted messages to the MS and analyzing MS responses, keystream for arbitrary frames can be recovered.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Midnightblue
Products
Tetra\
CVE-2022-24400

DCK pinning attack in TETRA

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Midnightblue
Products
Tetra\