Midnightblue Tetra:burst — known CVE vulnerabilities

Every CVE whose affected-product data names Midnightblue Tetra:burst, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-24401 — CVSS 8.8 (high): Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon…
• CVE-2022-24402 — CVSS 8.8 (high): The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for…
• CVE-2022-24400 — CVSS 7.5 (high): A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.
• CVE-2022-24404 — CVSS 5.9 (medium): Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active…
• CVE-2022-24403 — CVSS 4.3 (medium): The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK…