Experts found 36 vulnerabilities in the LTE protocol

[SansVarnic]

This is a fairly short article and a few days old but;

 

Source: https://securityaffairs.co/wordpress/82936/hacking/lte-vulnerabilities.html

2nd source (research paper): https://syssec.kaist.ac.kr/pub/2019/kim_sp_2019.pdf

Quote

“Based on the security property, LTEFuzz generates and sends the test cases to a target network, and classifies the problematic behavior by only monitoring the device-side logs.” reads the research paper.

“The impact of the attacks is to either deny LTE services to legitimate users, spoof SMS messages, or eavesdrop/manipulate user data traffic,”

The research paper is quite thorough, if you have the will to read through the whole thing. It has some fairly concerning items to ponder on.

I am concerned but at the same time not as concerned as I probably should be...

 

Kinda make you think a bit about how you use your cellphone or mobile for certain tasks... hmm.

Thoughts?

[John_Trollinski]

didn't someone already Post something similar a few weeks back?

[Stefan Payne]

8 minutes ago, SansVarnic said:

Kinda make you think a bit about how you use your cellphone or mobile for certain tasks... hmm.

Thoughts?

Wasn't GSM wide open for years?? And had even more security holes?

 

Did they even try to make LTE somewhat Secure or dind't they even care too much and only make it look somewhat secure??

 

The biggest question is:
Can it be fixed or is it a Hardware issue that can not be fixed without replacing the hardware?

[pas008]

8 minutes ago, John_Trollinski said:

didn't someone already Post something similar a few weeks back?

Yeah here

[2FA]

Just now, Stefan Payne said:

Wasn't GSM wide open for years?? And had even more security holes?

 

Did they even try to make LTE somewhat Secure or dind't they even care too much and only make it look somewhat secure??

 

The biggest question is:
Can it be fixed or is it a Hardware issue that can not be fixed without replacing the hardware?

It reads more like vulnerabilities in the implementations from various vendors, and not the standard itself (though I'm sure there are several there).

[Stefan Payne]

1 minute ago, 2FA said:

It reads more like vulnerabilities in the implementations from various vendors, and not the standard itself (though I'm sure there are several there).

Ah, so its not a "WE'RE GONNA DIE!!!1111" Vulnerability that isn't fixable but a "Its bad but light is at the end of the Tunnel" one that can be fixed??

 

 

Have you looked at what you can do with this?