Описание
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
Ссылки
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.7 (исключая)
cpe:2.3:a:gotenna:atak_plugin:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-204
CWE-203
Связанные уязвимости
CVSS3: 4.3
github
больше 1 года назад
The goTenna Pro ATAK Plugin has a payload length vulnerability that makes it possible to tell the length of the payload regardless of the encryption used.
EPSS
Процентиль: 13%
0.00042
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-204
CWE-203