← volver
CVE-2024-47127

Weak Authentication in goTenna Pro

CVSS 6 MEDIUMEPSS 0.1%CWE-1390
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
26 sep 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This vulnerability can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. It is advised to share encryption keys via QR scanning for higher security operations and update your app to the current release for enhanced encryption protocols.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
goTenna · Pro

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →