What’s Vulnerable › Vulnerabilities

CVE-2022-26943: Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-19 · updated 2026-06-17
• Weakness: CWE-338

Description

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited boottime pool entropy, an adversary can derive the contents of the entropy pool by an exhaustive search of possible values, based on an observed authentication challenge. Second, an adversary can use knowledge of the entropy pool to predict authentication challenges. As such, the unit is vulnerable to CVE-2022-24400.

Affected products

• Motorola Mtm5400 Firmware: all versions
• Motorola Mtm5500 Firmware: all versions

References

• https://tetraburst.com/
• https://tetraburst.com/

Get alerted when CVE-2022-26943 or the next vulnerability affects your stack