Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-41715 EUVD-2024-39159GHSA-r9gf-v8wf-j3wq

goTenna Pro ATAK Plugin Observable Response Discrepancy

Published Sep 26, 2024 · Updated Oct 17, 2024 · Assigned by icscert

Description

The goTenna Pro ATAK Plugin does not inject extra characters into
broadcasted frames to obfuscate the length of messages. This makes it
possible to tell the length of the payload regardless of the encryption
used.

Affected products

VendorProductAffectedFixed
goTenna Pro ATAK Plugin ≤ 1.9.12 —

Advisories 1

References