CVE-2019-18659: Authentication Bypass by Spoofing

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...

PT-2019-15561

Name of the Vulnerable Software and Affected Versions LTE phones affected versions not specified Description The issue concerns the Wireless Emergency Alerts WEA protocol, which lacks cryptographic authentication, allowing remote attackers to spoof a Presidential Alert. This can be demonstrated b...