CVE-2019-18659

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...

CVE-2019-18659

CVE-2019-18659 concerns the Wireless Emergency Alerts (WEA) protocol, where cryptographic authentication is not used, enabling spoofing of a Presidential Alert as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 (SIB12). The connected Red Hat Red Hat advisory reiterates t...

CVE-2019-18659: Authentication Bypass by Spoofing

The Wireless Emergency Alerts WEA protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE System Information Block 12 aka SIB12. NOTE: testing inside an RF-isolated shield box suggested that...