CVE-2024-47128

Insertion of Sensitive Information Into Sent Data in goTenna Pro PUBLISHED

Description (CNA)

The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations.

Affected (CNA)

Vendor / product	Versions
goTenna / Pro	affected 0 through 1.61

CWE

CWE-201

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.