CVE-2025-32885
- State
- Published
- Severity
- 6.5 Medium
- Published
- May 1, 2025
- Updated
- May 1, 2025
- Reserved
- Apr 11, 2025
Description
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N | mitre |
Weaknesses
- CWE-1390 Weak Authentication
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.