CVE-2024-47124 LOW

CVE-2024-47124: Cleartext Transmission of Sensitive Information in goTenna Pro

Vendor Gotenna
Product Pro
Weakness CWE-319 · Cleartext transmission
Published September 26, 2024
Last update October 17, 2024
View on NVD All CVEs

CVSS base score

2.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to the current app version which uses AES-256 encryption for callsigns in encrypted operation.

Key dates

02Disclosure timeline

September 26, 2024 CVE published
October 17, 2024 Record updated