| 名称 |
Weakening of Cellular Encryption |
|
|
| 摘要 |
An attacker, with control of a Cellular Rogue Base Station or through cooperation with a Malicious Mobile Network Operator can force the mobile device (e.g., the retransmission device) to use no encryption (A5/0 mode) or to use easily breakable encryption (A5/1 or A5/2 mode). |
| 前置条件 |
Cellular devices that allow negotiating security modes to facilitate backwards compatibility and roaming on legacy networks. |
| 解决方案 | Use of hardened baseband firmware on retransmission device to detect and prevent the use of weak cellular encryption. Monitor cellular RF interface to detect the usage of weaker-than-expected cellular encryption. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-757 |
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-620 |
An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data. |
|