CVE-2022-26943: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited...