CAPEC Definitions / CAPEC-606
CAPEC-606: Weakening of Cellular Encryption
An attacker, with control of a Cellular Rogue Base Station or through cooperation with a Malicious Mobile Network Operator can force the mobile device (e.g., the retransmission device) to use no encryption (A5/0 mode) or to use easily breakable encryption (A5/1 or A5/2 mode).
Extended Description
No Extended Description.
Mitigations
Use of hardened baseband firmware on retransmission device to detect and prevent the use of weak cellular encryption.
Monitor cellular RF interface to detect the usage of weaker-than-expected cellular encryption.
Relationships with other CAPECs
CAPEC-620: Drop Encryption Level
Prerequisites
Cellular devices that allow negotiating security modes to facilitate backwards compatibility and roaming on legacy networks.
Related Weaknesses
CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
