CVE-2024-45838 — goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information

CVE-2024-45838

goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information PUBLISHED

Description (CNA)

The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It is advised to not use sensitive information in callsigns when using this and previous versions of the plugin. Update to current plugin version which uses AES-256 encryption for callsigns in encrypted operation

Affected (CNA)

Vendor / product	Versions
goTenna / Pro ATAK Plugin	affected 0 through 1.9.12

CWE

CWE-319

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.