Vulnerability · Published Oct 19, 2023 · Assigned by NCSC-NL
CVE-2022-26942Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
High 8.2
In plain English
A high-severity security flaw in Mobile Radio from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure supervisor level code execution can exploit the issue in order to gain secure supervisor code execution within the TEE. This constitutes a full break of the TEE module, exposing the device key as well as any TETRA cryptographic keys and the confidential TETRA cryptographic primitives.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Motorola | Mobile Radio | MTM5000 |
Weakness: CWE-822 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:X/IR:X/AR:X/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:H/MI:H/MA:H
References
- TETRA:BURST related