Lucene search

NCSC-NLCVE-2022-24402

HistoryOct 19, 2023 - 10:15 a.m.

CVE-2022-24402

2023-10-1910:15:09

CWE-307

CWE-334

NCSC-NL

web.nvd.nist.gov

cve

2022

24402

tetra

tea1

key generator

vulnerability

nvd

security

encryption

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

20.6%

JSON

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.

Affected configurations

Nvd

Node

midnightbluetetra\Matchburst-

VendorProductVersionCPE
midnightbluetetra\burstcpe:2.3:a:midnightblue:tetra\:burst:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
midnightblue	tetra\	burst	cpe:2.3:a:midnightblue:tetra\:burst:-:::::::*

CNA Affected

[
  {
    "vendor": "ETSI",
    "product": "TETRA Standard",
    "versions": [
      {
        "version": "TEA1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

tetraburst.com/

Social References

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:A/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

20.6%

JSON

Related for CVE-2022-24402