Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-47127

Опубликовано: 26 сент. 2024
Источник: nvd
CVSS3: 6.5
CVSS3: 3.1
EPSS Низкий

Описание

In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This vulnerability can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. It is advised to share encryption keys via QR scanning for higher security operations and update your app to the current release for enhanced encryption protocols.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gotenna:gotenna_pro:*:*:*:*:*:iphone_os:*:*
Версия до 1.6.1 (включая)
cpe:2.3:a:gotenna:gotenna_pro:*:*:*:*:*:android:*:*
Версия до 2.0.3 (исключая)

EPSS

Процентиль: 18%
0.00056
Низкий

6.5 Medium

CVSS3

3.1 Low

CVSS3

Дефекты

CWE-1390
CWE-287

Связанные уязвимости

CVSS3: 3.1
github
больше 1 года назад

In the goTenna Pro there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing gotenna mesh networks. This vulnerability can be exploited if the device is being used in a unencrypted environment or if the cryptography has already been compromised.

EPSS

Процентиль: 18%
0.00056
Низкий

6.5 Medium

CVSS3

3.1 Low

CVSS3

Дефекты

CWE-1390
CWE-287