This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-43694 | BDVDB-2026-249355 Detail

goTennaPro ATAK Plugin

Description#

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: physical.

Weaknesses#

  • CWE-922 Insecure Storage of Sensitive Information

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.