CVE-2024-47124CWE-319

Cleartext Transmission of Sensitive Information in goTenna Pro

Low · published September 26, 2024

CVSS v4.0
2.3
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

The goTenna Pro App does not encrypt callsigns in messages. It is

recommended to not use sensitive information in callsigns when using

this and previous versions of the app and update your app to the current

app version which uses AES-256 encryption for callsigns in encrypted

operation.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00095 · 0.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-09-26T17:21Z
EPSS history
Timeline
  • 26 SEP 17:21Z
    Cleartext Transmission of Sensitive Information in goTenna Pro
    cvelistv5