CVE-2024-47129
Observable Response Discrepancy in goTenna Pro
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 26, 2024
- Updated
- Oct 17, 2024
- Reserved
- Sep 18, 2024
Description
The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | icscert |
Weaknesses
- CWE-204 Observable Response Discrepancy
Affected Products
| Product | Versions |
|---|---|
ProgoTenna |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.