VULNERABILITY INTELLIGENCE

CVE-2024-41715

CVSS score4.3 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-09-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-204
  • nvd@nist.gov: CWE-203

Primary references