Atak Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:gotenna:atak_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gotenna (04dc2b99-45b6-5512-bd24-ced62841f7d2) |
|---|---|
| Product | Atak Plugin (126f6dd9-6740-5967-93c3-6a015169d185) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-43694 |
vulnerable | 2026-06-08 06:45:52.880937 |
goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information
MEDIUM (4.3)
In the goTenna Pro ATAK Plugin application, the encryption keys are
stored along with a static IV on the device. This allows for complete
decryption of keys stored on the device. This allows an attacker to
decrypt all encrypted broadcast communications based on broadcast keys
stored on the device.
Published: 2024-09-26T17:25:52.840Z
Updated: 2024-09-26T18:26:54.248Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41715 |
vulnerable | 2026-06-08 06:43:54.956822 |
goTenna Pro ATAK Plugin Observable Response Discrepancy
MEDIUM (4.3)
The goTenna Pro ATAK Plugin does not inject extra characters into
broadcasted frames to obfuscate the length of messages. This makes it
possible to tell the length of the payload regardless of the encryption
used.
Published: 2024-09-26T17:46:05.011Z
Updated: 2024-10-17T17:03:47.283Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.