Description
The goTenna Pro App does not authenticate public keys which allows an
unauthenticated attacker to manipulate messages. It is advised to update
your app to the current release for enhanced encryption protocols.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| goTenna | Pro | ≤ 1.61 | — |
Advisories 1
- ICSA-24-270-04 goTenna Pro X and Pro X2 (Update A) CISA ICS & IT advisories · Oct 17, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04 government-resource