CVE-2025-32886

CVSS 4 MEDIUMEPSS 0.1%CWE-923

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

01 May 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.

CVSS:3.1/AC:L/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities https://gotenna.com