Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gcw5-wf74-74mf

Опубликовано: 27 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

EPSS

Процентиль: 16%
0.00051
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

CVSS3: 9.8
fstec
больше 3 лет назад

Уязвимость реализации протокола Motorola Data Link Communication (MDLC), связанная с использованием блочного шифрования Tiny Encryption Algorithm (TEA) в режиме ECB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 16%
0.00051
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-327