Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-41931 EUVD-2024-39282GHSA-4v4q-xr4r-hm4m

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

Published Sep 26, 2024 · Updated Oct 17, 2024 · Assigned by icscert

Description

The goTenna Pro ATAK Plugin encryption key name is always sent
unencrypted when the key is sent over RF through a broadcast message. It
is advised to share the encryption key via local QR for higher security
operations.

Affected products

VendorProductAffectedFixed
goTenna Pro ATAK Plugin ≤ 1.9.12 —

Advisories 1

References