Vendors / ETSI Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now ETSI records in CISA KEV No ETSI vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard agai…
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00602 · Published 2023-10-19 · No fix listed CWE-334
Priority LOW 38
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00339 · Published 2023-10-19 · No fix listed CWE-323
Priority LOW 33
A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00274 · Published 2023-10-19 · No fix listed CWE-807
Priority LOW 32
Lack of cryptographic integrity check on TETRA air-interface encrypted traffic.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00264 · Published 2023-10-19 · No fix listed CWE-353
Priority LOW 30
The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01522 · Published 2019-02-26 · No fix listed CWE-310
Priority LOW 19
The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks).
CVSS 3.1 MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.00131 · Published 2023-12-05 · No fix listed CWE-327
Open these records in search → All records by CVSS severity
0 4 2 0 0
THREATIST.IORead the docs