VULNERABILITY INTELLIGENCE

CVE-2024-47129

CVSS score4.3 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-09-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-204
  • nvd@nist.gov: CWE-203

Primary references