CVE-2022-24402

Katalog CVE

CVSS 7.5 · High EPSS 0,61%

Kerentanan Small Space of Random Values pada midnightblue tetra. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.

Rincian

Terbit di NVD

19 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-334: Small Space of Random Values
CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tetraburst.com/ advisory vendor