Description
The goTenna Pro ATAK Plugin does not inject extra characters into
broadcasted frames to obfuscate the length of messages. This makes it
possible to tell the length of the payload regardless of the encryption
used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| goTenna | Pro ATAK Plugin | ≤ 1.9.12 | — |
Advisories 1
- ICSA-24-270-05 goTenna Pro ATAK Plugin (Update A) CISA ICS & IT advisories · Oct 17, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05 government-resource