PatchTheCVEmidnightblue vulnerabilities
Recent CVEs affecting midnightblue products. 5 tracked.
midnightblue has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-12-05. Highest priority: CVE-2022-24402 (score 43/100).
- CVE-2022-24404 MEDIUM 5.9 DOWNGRADE Lack of cryptographic integrity check on TETRA air-interface encrypted traffic
- CVE-2022-24403 MEDIUM 4.3 DOWNGRADE The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C
- CVE-2022-24402 HIGH 8.8 DOWNGRADE The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi
- CVE-2022-24401 HIGH 8.8 DOWNGRADE Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator
- CVE-2022-24400 HIGH 7.5 DOWNGRADE A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t
FAQ
How do I fix midnightblue vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is midnightblue being exploited right now?
None of the tracked midnightblue CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which midnightblue CVE should I patch first?
CVE-2022-24402 currently ranks highest (43/100): The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bi.