Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2024-47124

Cleartext Transmission of Sensitive Information in goTenna Pro

Description

The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to the current app version which uses AES-256 encryption for callsigns in encrypted operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

goTenna Pro

Default version status: unaffected

  • 0 to ≤ 1.61affected

References