Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf8r-hfj4-5hrm

Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.3

Описание

The goTenna Pro ATAK Plugin use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message.

The goTenna Pro ATAK Plugin use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message.

EPSS

Процентиль: 13%
0.00044
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-345
CWE-353

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is advised to continue to use encryption in the plugin and update to the current release for enhanced encryption protocols.

EPSS

Процентиль: 13%
0.00044
Низкий

6 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-345
CWE-353