Skip to content
OpenAdvisories
High · 7.5 CVE-2022-24400 EUVD-2022-29292GHSA-6w2r-58cq-54q2

DCK pinning attack in TETRA

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by NCSC-NL

Description

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.

Affected products

VendorProductAffectedFixed
ETSI TETRA Standard all —

References