← volver
CVE-2024-47123

Missing Support for Integrity Check in goTenna Pro

CVSS 6 MEDIUMEPSS 0.1%CWE-353
The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is recommended to continue to use encryption in the app and update to the current release for more secure operations.
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
goTenna · Pro

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →