by Kastro
Paper/Archive/CVE-2022-30273

CVE-2022-30273

mitre — The Motorola MDLC protocol through 2022-05-02 mishandles message integrity.

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 38.3.383 × 207.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refforescout.com/blogrefen.wikipedia.org/wiki/Block_cipher_mode_of_operationrefcisa.gov/uscert/ics/advisories/icsa-22-179-05