Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-47124 EUVD-2024-42276GHSA-r7rh-frh5-cg5j

Cleartext Transmission of Sensitive Information in goTenna Pro

Published Sep 26, 2024 · Updated Oct 17, 2024 · Assigned by icscert

Description

The goTenna Pro App does not encrypt callsigns in messages. It is
recommended to not use sensitive information in callsigns when using
this and previous versions of the app and update your app to the current
app version which uses AES-256 encryption for callsigns in encrypted
operation.

Affected products

VendorProductAffectedFixed
goTenna Pro ≤ 1.61 —

Advisories 1

References