CVE-2024-47125

概要

参考情報

• cisa.gov/news-events/ics-advisories/icsa-24-270-04 · Third Party Advisory

gotenna pro のその他の脆弱性

• CVE-2024-47130中 6.5The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. It is advise…
• CVE-2024-47129中 4.3The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to…
• CVE-2024-47128中 4.3The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advise…
• CVE-2024-47127低 3.1In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a softw…
• CVE-2024-47126高 8.8The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it…