Логотип exploitDog
bind:CVE-2024-43108
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-43108

Количество 2

Количество 2

nvd логотип

CVE-2024-43108

больше 1 года назад

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is advised to continue to use encryption in the plugin and update to the current release for enhanced encryption protocols.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-pf8r-hfj4-5hrm

больше 1 года назад

The goTenna Pro ATAK Plugin use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-43108

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is advised to continue to use encryption in the plugin and update to the current release for enhanced encryption protocols.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
github логотип
GHSA-pf8r-hfj4-5hrm

The goTenna Pro ATAK Plugin use AES CTR mode for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to any attacker that can access the message.

CVSS3: 5.3
0%
Низкий
больше 1 года назад

Уязвимостей на страницу