CVE-2024-43814CWE-201

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

Medium · published September 26, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

The goTenna Pro ATAK Plugin's default settings are to share Automatic

Position, Location, and Information (PLI) updates every 60 seconds once

the plugin is active and goTenna is connected. Users that are unaware of

their settings and have not activated encryption before a mission may

accidentally broadcast their location unencrypted. It is advised to

verify PLI settings are the desired rate and activate encryption prior

to mission. Update to the latest Plugin to disable this default setting.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2024-09-26T17:48Z
EPSS history
Timeline
  • 26 SEP 17:48Z
    goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data
    cvelistv5