Lack of cryptographic integrity check on TETRA air... · CVE-2022-24404 · GitHub Advisory Database · GitHub

Lack of cryptographic integrity check on TETRA air...

High severity Unreviewed Published Oct 19, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.

References

Published by the National Vulnerability Database

Oct 19, 2023

Published to the GitHub Advisory Database Oct 19, 2023

Last updated Apr 4, 2024

Weaknesses

CWE-353

Missing Support for Integrity Check

The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum. Learn more on MITRE.

CWE-354

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or checksums of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission. Learn more on MITRE.