CVE-2022-30273: Critical severity motorola solutions mdlc vulnerability

Published Jul 26, 2022

Updated

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

Affected Software

4 affected components

Motorola Solutions MDLC: Versions 4.80.0024, 4.82.004, and 4.83.001

Motorolasolutions Mdlc=4.80.0024

Motorolasolutions Mdlc=4.82.004

Motorolasolutions Mdlc=4.83.001

Event History

Jul 26, 2022

CVE Published

via MITRE·09:21 PM

Data Sourced

via MITRE·09:21 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

ICSA-22-179-05

Frequently Asked Questions

What is the severity of CVE-2022-30273?

CVE-2022-30273 is considered a moderate severity vulnerability due to its impact on message integrity.

How do I fix CVE-2022-30273?

To fix CVE-2022-30273, update the Motorola MDLC software to versions beyond 4.83.001.

What are the affected versions for CVE-2022-30273?

CVE-2022-30273 affects Motorola MDLC versions 4.80.0024, 4.82.004, and 4.83.001.

What type of vulnerability is CVE-2022-30273?

CVE-2022-30273 is a vulnerability related to improper handling of message integrity in the Motorola MDLC protocol.

Does CVE-2022-30273 affect Legacy Encryption mode?

Yes, CVE-2022-30273 primarily impacts the Legacy Encryption mode using the Tiny Encryption Algorithm in ECB mode.