VULNERABILITY INTELLIGENCE

CVE-2022-24401

CVSS score8.8 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2023-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By sending crafted messages to the MS and analyzing MS responses, keystream for arbitrary frames can be recovered.

Weakness classification

  • CWE-323: Reusing a Nonce, Key Pair in Encryption
  • CWE-639: Authorization Bypass Through User-Controlled Key

Primary references