The APCO P25 protocol contains a flaw that may allow a remote denial of service. The issue is triggered when an unauthenticated “inhibit” extended function command (XFC) is directed towards a legitimate radio device and causing them to become disabled, resulting in the loss of availability of a radio device.
Classification
Location:
Remote / Network Access,
Wireless Vector
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Workaround
Exploit:
Exploit Public
Solution
Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily work around the flaw by implementing the following workaround: Some manufacturers allow for radios to be configured to ignore inhibit commands. This is often a configuration option that can be set for each MR using the equipment’s programming interface. Allowing inhibit to be disabled is intended to mitigate the threat of DoS attacks but does so at the cost of negating the anti-theft measure.
