What is CVE-2022-30273?

CVE-2022-30273 is a critical-severity vulnerability in Motorolasolutions Mdlc, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 9.8/10. Published 2022-07-26.

How severe is CVE-2022-30273?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Motorolasolutions Mdlc

CVE-2022-30273

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Motorolasolutions Mdlc — versions 4.80.0024, 4.82.004, 4.83.001
N/a — versions n/a

Weakness classification (CWE)

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC, Not Applicable)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2022-30273?: CVE-2022-30273 is a critical-severity vulnerability in Motorolasolutions Mdlc, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 9.8/10. Published 2022-07-26.
How severe is CVE-2022-30273?: Critical severity. CVSS v3 base score is 9.8 out of 10.