Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

28 records

Vendor: goTenna Clear all filters
TI-2024-29407 CVE-2024-43814 · GHSA-vcw2-g6r2-h5hh

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

Priority LOW 23

The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00131 Published 2024-09-26 No fix listed CWE-201
TI-2024-27775 CVE-2024-41715 · GHSA-r9gf-v8wf-j3wq

goTenna Pro ATAK Plugin Observable Response Discrepancy

Priority LOW 23

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00141 Published 2024-09-26 No fix listed CWE-204
TI-2024-27781 CVE-2024-41722 · GHSA-xw45-w4r2-g9c2

goTenna Pro ATAK Plugin Weak Authentication

Priority LOW 26

In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00148 Published 2024-09-26 No fix listed CWE-1390
TI-2024-31503 CVE-2024-47130 · GHSA-36xj-gx8g-m5fr

Missing Authentication for Critical Function in goTenna Pro

Priority LOW 39

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00216 Published 2024-09-26 No fix listed CWE-306
TI-2024-31502 CVE-2024-47129 · GHSA-wq63-c6fv-j4j6

Observable Response Discrepancy in goTenna Pro

Priority LOW 23

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00135 Published 2024-09-26 No fix listed CWE-204
TI-2024-31501 CVE-2024-47128 · GHSA-g8xq-w7g6-jc3v

Insertion of Sensitive Information Into Sent Data in goTenna Pro

Priority LOW 23

The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00131 Published 2024-09-26 No fix listed CWE-201
TI-2024-28780 CVE-2024-43108 · GHSA-pf8r-hfj4-5hrm

goTenna Pro ATAK Plugin Missing Support for Integrity Check

Priority LOW 25

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00091 Published 2024-09-26 No fix listed CWE-353
TI-2024-31500 CVE-2024-47127 · GHSA-fg6p-6vjg-95r5

Weak Authentication in goTenna Pro

Priority LOW 26

In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00114 Published 2024-09-26 No fix listed CWE-1390
TI-2024-31496 CVE-2024-47123 · GHSA-3f32-jc9w-78m7

Missing Support for Integrity Check in goTenna Pro

Priority LOW 25

The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00085 Published 2024-09-26 No fix listed CWE-353
Load more