CVE-2024-47123CWE-353

Missing Support for Integrity Check in goTenna Pro

Medium · published September 26, 2024

CVSS v4.0
6.0
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

The goTenna Pro App uses AES CTR type encryption for short, encrypted

messages without any additional integrity checking mechanisms. This

leaves messages malleable to an attacker that can access the message. It

is recommended to continue to use encryption in the app and update to

the current release for more secure operations.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00085 · 0.3th percentile
Weakness
CWE-353 · Missing Support for Integrity Check
Published
2024-09-26T17:20Z
EPSS history
Timeline
  • 26 SEP 17:20Z
    Missing Support for Integrity Check in goTenna Pro
    cvelistv5