CVE-2024-47129

Observable Response Discrepancy in goTenna Pro PUBLISHED

Description (CNA)

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Affected (CNA)

Vendor / product	Versions
goTenna / Pro	affected 0 through 1.61

CWE

CWE-204

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.