Is CVE-2022-24403 actively exploited?

No active exploitation of CVE-2022-24403 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-24403 be exploited remotely?

Partially. CVE-2022-24403 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2022-24403?

CVE-2022-24403 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2022-24403

MEDIUM

CVE-2022-24403

CWE-327Published: December 5, 2023· Updated: Jun 17, 2026

4.3

CVSS v3.1

Official Description

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs.

NVD Source

Technical Analysis

CVE-2022-24403 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.