CVE-2024-47130

概要

参考情報

• cisa.gov/news-events/ics-advisories/icsa-24-270-04 · Third Party Advisory

gotenna pro のその他の脆弱性

• CVE-2024-47129中 4.3The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to…
• CVE-2024-47128中 4.3The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advise…
• CVE-2024-47127低 3.1In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a softw…
• CVE-2024-47126高 8.8The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it…
• CVE-2024-47125中 5.4The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to upd…