exploitDog

CVE-2024-43694

Опубликовано: 26 сент. 2024

Источник: nvd

CVSS3: 4.3

CVSS3: 6.5

EPSS Низкий

Описание

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

Ссылки

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gotenna:atak_plugin:*:*:*:*:*:*:*:*

Версия до 2.0.7 (исключая)

EPSS

Процентиль: 30%

0.00109

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-922

Связанные уязвимости

GHSA-rqp2-49p2-7346

CVSS3: 4.3

github

больше 1 года назад

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

EPSS

Процентиль: 30%

0.00109

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-922