Description
The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It
is advised to not use sensitive information in callsigns when using this
and previous versions of the plugin. Update to current plugin version
which uses AES-256 encryption for callsigns in encrypted operation
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| goTenna | Pro ATAK Plugin | ≤ 1.9.12 | — |
Advisories 1
- ICSA-24-270-05 goTenna Pro ATAK Plugin (Update A) CISA ICS & IT advisories · Oct 17, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05 government-resource