Lucene search

NCSC-NLCVE-2022-24400

HistoryOct 19, 2023 - 10:15 a.m.

CVE-2022-24400

2023-10-1910:15:08

CWE-807

CWE-639

NCSC-NL

web.nvd.nist.gov

cve-2022-24400

tetra

authentication

mitm

security

vulnerability

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R/CR:H/IR:H/AR:H/MAV:A/MAC:H/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

AI Score

Confidence

High

EPSS

Percentile

15.5%

JSON

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.

Affected configurations

Nvd

Node

midnightbluetetra\Matchburst-

VendorProductVersionCPE
midnightbluetetra\burstcpe:2.3:a:midnightblue:tetra\:burst:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
midnightblue	tetra\	burst	cpe:2.3:a:midnightblue:tetra\:burst:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "affected",
    "vendor": "ETSI",
    "product": "TETRA Standard",
    "versions": [
      {
        "version": "all",
        "status": "affected"
      }
    ]
  }
]

References

tetraburst.com/

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R/CR:H/IR:H/AR:H/MAV:A/MAC:H/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

AI Score

Confidence

High

EPSS

Percentile

15.5%

JSON

Related for CVE-2022-24400