GCVE - cpe:2.3:a:etsi:tetra_standard:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:etsi:tetra_standard:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Etsi (`4d402198-d2a5-55ca-a686-2d70d7a79715`)
Product	Tetra Standard (`1acf6297-28cf-5549-ac23-f2980a6644d3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24404`	vulnerable	2026-06-08 05:41:00.263471	Ciphertext Malleability in TETRA MEDIUM (5.9) Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is employed, this allows an active adversary to manipulate cleartext data in a bit-by-bit fashion. Published: 2023-10-19T09:31:43.802Z Updated: 2024-08-03T04:13:55.323Z Open on db.gcve.eu Reference links https://tetraburst.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24403`	vulnerable	2026-06-08 05:41:00.263116	De-anonymization attack in TETRA MEDIUM (4.3) The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs. Published: 2023-12-05T13:54:32.045Z Updated: 2024-08-03T04:13:55.262Z Open on db.gcve.eu Reference links https://tetraburst.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24402`	vulnerable	2026-06-08 05:41:00.262815	Intentionally weakened effective strength in TETRA TEA1 HIGH (8.8) The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks. Published: 2023-10-19T09:32:23.476Z Updated: 2024-09-12T20:31:31.278Z Open on db.gcve.eu Reference links https://tetraburst.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24401`	vulnerable	2026-06-08 05:41:00.262312	Keystream recovery for arbitrary frames in TETRA HIGH (8.8) Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of these counters in a mobile station, provoking keystream re-use. By sending crafted messages to the MS and analyzing MS responses, keystream for arbitrary frames can be recovered. Published: 2023-10-19T09:32:53.702Z Updated: 2024-08-03T04:13:55.205Z Open on db.gcve.eu Reference links https://tetraburst.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24400`	vulnerable	2026-06-08 05:41:00.261050	DCK pinning attack in TETRA HIGH (7.5) A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero. Published: 2023-10-19T09:33:28.366Z Updated: 2024-09-12T20:30:58.123Z Open on db.gcve.eu Reference links https://tetraburst.com/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.