VULNERABILITY INTELLIGENCE

CVE-2024-43694

CVSS score4.3 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-09-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-922

Primary references