CVE-2022-26942 Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
Attackers with non-secure supervisor access can exploit missing pointer validation to gain secure supervisor code execution, exposing cryptographic keys.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-26942?
CVE-2022-26942 is a high-severity memory corruption vulnerability in Motorola Mobile Radio, published on 19 Oct 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules, an adversary with non-secure supervisor level code execution can exploit the issue in order to gain secure supervisor code execution within the TEE. This constitutes a full break of the TEE module, exposing the device key as well as any TETRA cryptographic keys and the confidential TETRA cryptographic primitives.
Which versions are affected by CVE-2022-26942?
It affects 2 products.
Products include Motorola Mtm5400 Firmware, Motorola Mtm5500 Firmware.
How do I fix CVE-2022-26942?
No fix has been published for CVE-2022-26942 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-26942 being exploited?
There is no known exploitation of CVE-2022-26942 in the wild and no public exploit code.
Other vulnerabilities in Motorola Mobile Radio
Sources
Also known as GHSA-w833-px7j-q64c.