CVE-2024-41715
goTenna Pro ATAK Plugin Observable Response Discrepancy
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 26, 2024
- Updated
- Oct 17, 2024
- Reserved
- Sep 24, 2024
Description
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Pro ATAK PlugingoTenna |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.