CVE-2022-24400

CVE-2022-24400 is a medium-severity vulnerability affecting TETRA authentication procedures, specifically within midnightblue tetra products. This flaw allows a Man-in-the-Middle (MITM) attacker, capable of predicting the MS challenge RAND2, to force the session key (DCK) to zero. The attack requires adjacent network access and high attack complexity, potentially leading to high integrity impact and low confidentiality impact. While there is no evidence of active exploitation, public exploit code is unavailable, and community discussion and media coverage are limited.