Description
The goTenna Pro App does not inject extra characters into broadcasted
frames to obfuscate the length of messages. This makes it possible to
tell the length of the payload regardless of the encryption used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| goTenna | Pro | ≤ 1.61 | — |
Advisories 1
- ICSA-24-270-04 goTenna Pro X and Pro X2 (Update A) CISA ICS & IT advisories · Oct 17, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04 government-resource