CVE-2024-41715CWE-204

goTenna Pro ATAK Plugin Observable Response Discrepancy

Medium · published September 26, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

The goTenna Pro ATAK Plugin does not inject extra characters into

broadcasted frames to obfuscate the length of messages. This makes it

possible to tell the length of the payload regardless of the encryption

used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2024-09-26T17:46Z
EPSS history
Timeline
  • 26 SEP 17:46Z
    goTenna Pro ATAK Plugin Observable Response Discrepancy
    cvelistv5