New TETRA Radio Encryption Flaws Expose Law Enforcement Communications
60
CVE-2022-24402
—CVSS 3.1
7.5 high
EPSS
<1%p47
Published
()
Modified
Description
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.
- Vendors
- midnightblue
- Products
- tetra\
- Weakness
- CWE-334, CWE-307
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news3 stories
60
TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System
60