CVE-2024-47125

Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro PUBLISHED

Description (CNA)

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.

Affected (CNA)

Vendor / product	Versions
goTenna / Pro	affected 0 through 1.61

CWE

CWE-923

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.