Skip to content
OpenAdvisories
Medium · 5.9 CVE-2022-24404 EUVD-2022-29296GHSA-h6p5-xfhf-88h8

Ciphertext Malleability in TETRA

Published Oct 19, 2023 · Updated Aug 3, 2024 · Assigned by NCSC-NL

Description

Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.

Affected products

VendorProductAffectedFixed
ETSI TETRA Standard all —

References