Gotenna Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:gotenna:gotenna_pro:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Gotenna (04dc2b99-45b6-5512-bd24-ced62841f7d2) |
|---|---|
| Product | Gotenna Pro (8bfae515-deb1-52e6-8073-d184c0626c10) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47130 |
vulnerable | 2026-06-08 06:48:11.462049 |
Missing Authentication for Critical Function in goTenna Pro
HIGH (8.8)
The goTenna Pro App allows unauthenticated attackers to remotely update
the local public keys used for P2P and group messages. It is advised to
update your app to the current release for enhanced encryption
protocols.
Published: 2024-09-26T17:30:52.751Z
Updated: 2024-10-17T17:42:43.163Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47129 |
vulnerable | 2026-06-08 06:48:11.461433 |
Observable Response Discrepancy in goTenna Pro
MEDIUM (4.3)
The goTenna Pro App does not inject extra characters into broadcasted
frames to obfuscate the length of messages. This makes it possible to
tell the length of the payload regardless of the encryption used.
Published: 2024-09-26T17:30:12.759Z
Updated: 2024-10-17T17:40:06.968Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47128 |
vulnerable | 2026-06-08 06:48:11.460576 |
Insertion of Sensitive Information Into Sent Data in goTenna Pro
MEDIUM (4.3)
The goTenna Pro App encryption key name is always sent unencrypted when
the key is shared over RF through a broadcast message. It is advised to
share the encryption key via local QR for higher security operations.
Published: 2024-09-26T17:28:32.604Z
Updated: 2024-10-17T17:37:51.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47127 |
vulnerable | 2026-06-08 06:48:11.459816 |
Weak Authentication in goTenna Pro
MEDIUM (6.5)
In the goTenna Pro App there is a vulnerability that makes it possible
to inject any custom message with any GID and Callsign using a software
defined radio in existing goTenna mesh networks. This vulnerability can
be exploited if the device is being used in an unencrypted environment
or if the cryptography has already been compromised. It is advised to
share encryption keys via QR scanning for higher security operations and
update your app to the current release for enhanced encryption
protocols.
Published: 2024-09-26T17:27:35.188Z
Updated: 2024-10-17T17:35:50.706Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47126 |
vulnerable | 2026-06-08 06:48:11.458924 |
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in goTenna Pro
MEDIUM (6.5)
The goTenna Pro App does not use SecureRandom when generating passwords
for sharing cryptographic keys. The random function in use makes it
easier for attackers to brute force this password if the broadcasted
encryption key is captured over RF. This only applies to the optional
broadcast of an encryption key, so it is advised to share the key with
local QR code for higher security operations.
Published: 2024-09-26T17:26:26.643Z
Updated: 2024-10-17T17:33:31.127Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47125 |
vulnerable | 2026-06-08 06:48:11.458097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47124 |
vulnerable | 2026-06-08 06:48:11.455311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47123 |
vulnerable | 2026-06-08 06:48:11.454659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47122 |
vulnerable | 2026-06-08 06:48:11.451870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47121 |
vulnerable | 2026-06-08 06:48:11.450688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.