CVE-2024-47130CWE-306

Missing Authentication for Critical Function in goTenna Pro

High · published September 26, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

The goTenna Pro App allows unauthenticated attackers to remotely update

the local public keys used for P2P and group messages. It is advised to

update your app to the current release for enhanced encryption

protocols.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00216 · 11.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-09-26T17:30Z
EPSS history
Timeline
  • 26 SEP 17:30Z
    Missing Authentication for Critical Function in goTenna Pro
    cvelistv5