Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-24404

Ciphertext Malleability in TETRA

Description

Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ETSI TETRA Standard

Default version status: affected

  • allaffected

References