CVE Feed

    Dashboard / CVE / CVE-2025-32885

    CVE-2025-32885

    An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised.

    Published:May 1, 2025
    Last Modified:Jun 20, 2025
    EPS:May 1, 2025
    EPSS Score:0.00038
    CVSS Score:6.5

    Affected Products

    Vendor
    Gotenna
    Product
    Gotenna
    Vendor
    Gotenna
    Product
    Mesh
    Vendor
    Gotenna
    Product
    Mesh Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-1390 Weak Authentication

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-32881 (CVSS 4.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the u…
    CVE-2025-32889 (CVSS 7.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used …
    CVE-2025-32888 (CVSS 7.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token use…
    CVE-2025-32887 (CVSS 7.1) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes t…
    CVE-2025-32884 (CVSS 4.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the u…
    CVE-2025-32890 (CVSS 5.3) — An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implement…
    CVE-2025-32886 (CVSS 4) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are…
    CVE-2025-32882 (CVSS 5.3) — An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implem…
    CVE-2024-43814 (CVSS 5.3) — The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PL…
    CVE-2024-41931 (CVSS 5.3) — The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF throu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High