Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.
References
| Link | Resource |
|---|---|
| https://tetraburst.com/ | Vendor Advisory |
Configurations
History
25 Oct 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Midnightblue
Midnightblue tetra\ |
|
| CWE | CWE-354 | |
| CPE | cpe:2.3:a:midnightblue:tetra\:burst:-:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://tetraburst.com/ - Vendor Advisory |
19 Oct 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-19 10:15
Updated : 2023-11-07 03:44
NVD link : CVE-2022-24404
Mitre link : CVE-2022-24404
JSON object : View
Products Affected
midnightblue
- tetra\
CWE
CWE-354
Improper Validation of Integrity Check Value
