CVEvulnerability

CVE-2024-47125

7.6 HIGH Published 2024-09-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.6 HIGH — CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-287, CWE-923

Description

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.

Affected configurations

• gotenna gotenna pro (<= 1.6.1) • gotenna gotenna pro (< 2.0.3)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-923 Improper Restriction of Communication Channel to Intended Endpoints weakness

References