CVE-2024-41715

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Score

CVSS 4.0 5.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2024-09-26

Last modified

2024-10-17

Weaknesses

CWE-203, CWE-204

Affected products

• Atak Plugin (Gotenna)
• Pro Atak Plugin (Gotenna)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05