CVE Feed

    Dashboard / CVE / CVE-2024-43814

    CVE-2024-43814

    The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected. Users that are unaware of their settings and have not activated encryption before a mission may accidentally broadcast their location unencrypted. It is advised to verify PLI settings are the desired rate and activate encryption prior to mission. Update to the latest Plugin to disable this default setting.

    Published:Sep 26, 2024
    Last Modified:Oct 17, 2024
    EPS:Sep 26, 2024
    EPSS Score:0.00027
    CVSS Score:4.3

    Affected Products

    Vendor
    Gotenna
    Product
    Gotenna

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-32881 (CVSS 4.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the u…
    CVE-2025-32889 (CVSS 7.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used …
    CVE-2025-32888 (CVSS 7.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token use…
    CVE-2025-32887 (CVSS 7.1) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes t…
    CVE-2025-32884 (CVSS 4.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the u…
    CVE-2025-32890 (CVSS 5.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implement…
    CVE-2025-32886 (CVSS 4) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are…
    CVE-2025-32882 (CVSS 5.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implem…
    CVE-2025-32885 (CVSS 6.5) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possi…
    CVE-2024-41931 (CVSS 5.3) — The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF throu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High