Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rqp2-49p2-7346

Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.3

Описание

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

EPSS

Процентиль: 30%
0.00109
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

EPSS

Процентиль: 30%
0.00109
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-922