Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-24400

DCK pinning attack in TETRA

Description

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ETSI TETRA Standard

Default version status: affected

  • allaffected

References