CVE-2024-43694CWE-922

goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information

Medium · published September 26, 2024

CVSS v4.0
5.1
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In the goTenna Pro ATAK Plugin application, the encryption keys are

stored along with a static IV on the device. This allows for complete

decryption of keys stored on the device. This allows an attacker to

decrypt all encrypted broadcast communications based on broadcast keys

stored on the device.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2024-09-26T17:25Z
EPSS history
Timeline
  • 26 SEP 17:25Z
    goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information
    cvelistv5