The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited boottime pool entropy, an adversary can derive the contents of the entropy pool by an exhaustive search of possible values, based on an observed authentication challenge. Second, an adversary can use knowledge of the entropy pool to predict authentication challenges. As such, the unit is vulnerable to CVE-2022-24400.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://tetraburst.com/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: NCSC-NL
Published: 2023-10-19T09:34:20.646Z
Updated: 2024-08-03T05:18:38.337Z
Reserved: 2022-03-11T22:19:24.849Z
Link: CVE-2022-26943
Vulnrichment
Updated: 2024-08-03T05:18:38.337Z
NVD
Status : Modified
Published: 2023-10-19T10:15:09.963
Modified: 2024-11-21T06:54:50.800
Link: CVE-2022-26943
Redhat
No data.