Auth bypass in Etsi Tetra Standard
CVE-2022-24401
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By sending crafted messages to the MS and analyzing MS responses, keystream for arbitrary frames can be recovered.
EPSS: 0.003 (27.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Etsi Tetra Standard — versions all
- Midnightblue Tetra\ — versions burst
- Midnightblue Tetra\:burst
Weakness classification (CWE)
References
- cert@ncsc.nl (related, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-24401?
- CVE-2022-24401 is a high-severity vulnerability in Etsi Tetra Standard, classified under Reusing a Nonce, Key Pair in Encryption. CVSS score: 8.8/10. Published 2023-10-19.
- How severe is CVE-2022-24401?
- High severity. CVSS v3 base score is 8.8 out of 10.