PatchTheCVEtetra\ vulnerabilities and fixes
Recent CVEs affecting tetra\, with upgrade or downgrade steps. 5 tracked.
tetra\ has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-12-05. Highest priority: CVE-2022-24402 (score 43/100).
- CVE-2022-24404 MEDIUM 5.9 DOWNGRADE Lack of cryptographic integrity check on TETRA air-interface encrypted traffic
- CVE-2022-24403 MEDIUM 4.3 DOWNGRADE The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C
- CVE-2022-24402 HIGH 8.8 DOWNGRADE The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi
- CVE-2022-24401 HIGH 8.8 DOWNGRADE Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator
- CVE-2022-24400 HIGH 7.5 DOWNGRADE A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t
FAQ
How do I fix tetra\ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tetra\ being exploited right now?
None of the tracked tetra\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tetra\ CVE should I patch first?
CVE-2022-24402 currently ranks highest (43/100): The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi.