CVE-2024-41931 — goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

CVE-2024-41931

goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data PUBLISHED

Description (CNA)

The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.

Affected (CNA)

Vendor / product	Versions
goTenna / Pro ATAK Plugin	affected 0 through 1.9.12

CWE

CWE-201

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.