CVE-2024-41715

goTenna Pro ATAK Plugin Observable Response Discrepancy PUBLISHED

Description (CNA)

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Affected (CNA)

Vendor / product	Versions
goTenna / Pro ATAK Plugin	affected 0 through 1.9.12

CWE

CWE-204

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.