Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Priority LOW 23

The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00131 Published 2024-09-26 No fix listed CWE-201
TI-2024-27781 CVE-2024-41722 · GHSA-xw45-w4r2-g9c2

goTenna Pro ATAK Plugin Weak Authentication

Priority LOW 26

In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00148 Published 2024-09-26 No fix listed CWE-1390
Priority LOW 25

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00091 Published 2024-09-26 No fix listed CWE-353
Priority LOW 28

The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00117 Published 2024-09-26 No fix listed CWE-521