CVE-2024-43694
Medium
Description
In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.
SeverityMedium
CVSS4.3
Exploit probability—
ProductGotenna Atak Plugin
PublishedSep 26, 2024
First seenSep 26, 2024
Weakness typeCWE-922CWE-922
How to fix
Update
- gotenna atak_plugin2.0.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gotenna atak_plugin | v < 2.0.7 | 2.0.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.