CVE-2024-47125CWE-923

Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro

High · published September 26, 2024

CVSS v4.0
7.6
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

The goTenna Pro App does not authenticate public keys which allows an

unauthenticated attacker to manipulate messages. It is advised to update

your app to the current release for enhanced encryption protocols.

The record
Technical detail
CVSS v4.0
7.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2024-09-26T17:24Z
EPSS history
Timeline
  • 26 SEP 17:24Z
    Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro
    cvelistv5