← Voltar para CVEs

CVE-2022-30273

CRITICAL

9.8

Descricao

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado7/26/2022

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

motorolasolutions:mdlc

Fraquezas (CWE)

CWE-327CWE-345

Referencias

https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation(cve@mitre.org)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-05(cve@mitre.org)

https://www.forescout.com/blog/(cve@mitre.org)

https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-05(af854a3a-2127-422b-91ae-364da2661108)

https://www.forescout.com/blog/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.