CVE-2025-32881

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5

Medium · published May 1, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Published
2025-05-01T00:00Z
EPSS history
Timeline
  • 01 MAY 00:00Z
    An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5
    cvelistv5