Back to Database
Status published
Medium
CVE-2024-41931
goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data
Vulnerability Description
The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41931
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Erwin Karincic, Clayton Smith, and Dale Wooden reported this these vulnerabilities to CISA.
More from goTenna
View All →CVE-2024-47130
Missing Authentication for Critical Function in goTenna Pro
High
8.7
CVE-2024-47129
Observable Response Discrepancy in goTenna Pro
Medium
5.3
CVE-2024-47128
Insertion of Sensitive Information Into Sent Data in goTenna Pro
Medium
5.3
CVE-2024-47127
Weak Authentication in goTenna Pro
Medium
6
CVE-2024-47126
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in goTenna Pro
High
7.1
Affected Vendor
goTenna
View all reports →Affected Software
Pro ATAK Plugin
Vulnerable Versions:
0
Timeline
Official Publish:
September 26th, 2024
Last Modified:
October 17th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N