Skip to content
OpenAdvisories

Vendor

ETSI

5 known vulnerabilities.

Products

TETRA Standard 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-24400

    DCK pinning attack in TETRA

    A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.

    ETSI TETRA Standard
  • High 8.8
    CVE-2022-24401

    Keystream recovery for arbitrary frames in TETRA

    Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An activ…

    ETSI TETRA Standard
  • High 8.8
    CVE-2022-24402

    Intentionally weakened effective strength in TETRA TEA1

    The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.

    ETSI TETRA Standard