goTenna

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

goTenna records in CISA KEV

No goTenna vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gotenna 16 records LOW Gotenna Pro 10 records LOW Mesh Firmware 9 records LOW Atak Plugin 2 records LOW

Records

28 records

TI-2025-23919 CVE-2025-32889 · GHSA-j4xm-9jmh-g7cv

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 39

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0019 Published 2025-05-01 No fix listed CWE-798

TI-2025-23918 CVE-2025-32888 · GHSA-jqgh-w22q-m24f

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

LOW 39

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0019 Published 2025-05-01 No fix listed CWE-798

TI-2024-31503 CVE-2024-47130 · GHSA-36xj-gx8g-m5fr

Missing Authentication for Critical Function in goTenna Pro

LOW 39

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00216 Published 2024-09-26 No fix listed CWE-306

TI-2024-31498 CVE-2024-47125 · GHSA-w3gp-gprx-5vj8

Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro

LOW 34

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages.

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00142 Published 2024-09-26 No fix listed CWE-923

TI-2024-31499 CVE-2024-47126 · GHSA-7vrc-hc62-3f49

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in goTenna Pro

LOW 33

The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00238 Published 2024-09-26 No fix listed CWE-338

TI-2025-23917 CVE-2025-32887 · GHSA-vv8p-v9q5-4pvf

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 30

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00167 Published 2025-05-01 No fix listed CWE-319

TI-2024-30704 CVE-2024-45723 · GHSA-rgqq-jvq6-w93r

goTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number Generator

LOW 30

The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00143 Published 2024-09-26 No fix listed CWE-338

TI-2025-23920 CVE-2025-32890 · GHSA-vg58-p724-725x

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

LOW 28

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00131 Published 2025-05-01 No fix listed CWE-353

TI-2025-23915 CVE-2025-32885 · GHSA-f5qp-wfgr-pm73

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 28

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00232 Published 2025-05-01 No fix listed CWE-1390

TI-2025-23914 CVE-2025-32884 · GHSA-9rr5-mrc9-96h4

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

LOW 28

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00163 Published 2025-05-01 No fix listed CWE-319

TI-2025-23912 CVE-2025-32881 · GHSA-9cgq-h66g-4xhp

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 28

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00163 Published 2025-05-01 No fix listed CWE-319

TI-2024-30430 CVE-2024-45374 · GHSA-5257-g4x8-28qj

goTenna Pro ATAK Plugin Weak Password Requirements

LOW 28

The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00117 Published 2024-09-26 No fix listed CWE-521

TI-2025-23913 CVE-2025-32882 · GHSA-fgj7-v5cr-wfmr

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 27

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00093 Published 2025-05-01 No fix listed CWE-353

TI-2024-31500 CVE-2024-47127 · GHSA-fg6p-6vjg-95r5

Weak Authentication in goTenna Pro

LOW 26

In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00114 Published 2024-09-26 No fix listed CWE-1390

TI-2024-31494 CVE-2024-47121 · GHSA-xcqq-5vvm-q9m2

Weak Passwords Requirements in goTenna Pro

LOW 26

The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00117 Published 2024-09-26 No fix listed CWE-521

TI-2024-27781 CVE-2024-41722 · GHSA-xw45-w4r2-g9c2

goTenna Pro ATAK Plugin Weak Authentication

LOW 26

In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00148 Published 2024-09-26 No fix listed CWE-1390

TI-2024-31496 CVE-2024-47123 · GHSA-3f32-jc9w-78m7

Missing Support for Integrity Check in goTenna Pro

LOW 25

The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00085 Published 2024-09-26 No fix listed CWE-353

TI-2024-28780 CVE-2024-43108 · GHSA-pf8r-hfj4-5hrm

goTenna Pro ATAK Plugin Missing Support for Integrity Check

LOW 25

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00091 Published 2024-09-26 No fix listed CWE-353

TI-2025-23916 CVE-2025-32886 · GHSA-r3g9-3r7f-gg8r

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

LOW 24

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0015 Published 2025-05-01 No fix listed CWE-923

TI-2024-29296 CVE-2024-43694 · GHSA-rqp2-49p2-7346

goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information

LOW 24

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device.

CVSS 4.0MEDIUM 5.1 Physical Low privileges No interaction EPSS 0.00135 Published 2024-09-26 No fix listed CWE-922

TI-2024-31502 CVE-2024-47129 · GHSA-wq63-c6fv-j4j6

Observable Response Discrepancy in goTenna Pro

LOW 23

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00135 Published 2024-09-26 No fix listed CWE-204

TI-2024-31501 CVE-2024-47128 · GHSA-g8xq-w7g6-jc3v

Insertion of Sensitive Information Into Sent Data in goTenna Pro

LOW 23

The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00131 Published 2024-09-26 No fix listed CWE-201

TI-2024-29407 CVE-2024-43814 · GHSA-vcw2-g6r2-h5hh

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

LOW 23

The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00131 Published 2024-09-26 No fix listed CWE-201

TI-2024-27954 CVE-2024-41931 · GHSA-4v4q-xr4r-hm4m

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

LOW 23

The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00141 Published 2024-09-26 No fix listed CWE-201

TI-2024-27775 CVE-2024-41715 · GHSA-r9gf-v8wf-j3wq

goTenna Pro ATAK Plugin Observable Response Discrepancy

LOW 23

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00141 Published 2024-09-26 No fix listed CWE-204

Open these records in search →