TETRA Networks Found Vulnerable to Traffic Injection Due to Weak Authentication

Analysis indicates that TETRA networks, widely used in transport, civil defense, and utilities, have authentication weaknesses that expose them to traffic injection attacks. The protocol verifies devices only at the session level and does not check individual message integrity or re-authenticate devices when they hand off between cell towers. As a result, attackers could insert malicious voice and data traffic that goes undetected. The article cites potential consequences such as altered SCADA control commands and falsified emergency signals, referencing a 2026 Taiwan High Speed Rail cyber incident. The authors call for message-level authentication and mandatory re-authentication during handoffs to close the gap.