PT-2024-32417 · Gotenna · Gotenna Pro X+2

Clayton Smith + 2 · Published 2024-09-26 · Updated 2025-10-02 · CVE-2024-47122

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions goTenna Pro App (affected versions not specified) goTenna Pro X goTenna Pro X2

Description The encryption keys in the goTenna Pro App are stored along with a static IV on the End User Device (EUD), allowing for complete decryption of keys if the device is physically compromised. This enables an attacker to decrypt all encrypted broadcast communications based on the stored encryption keys. To mitigate this, strong access control measures and layered encryption on the EUD are recommended for more secure operation.

Recommendations For goTenna Pro App, consider using strong access control measures and layered encryption on the End User Device for more secure operation. For goTenna Pro X, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For goTenna Pro X2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2024-47122

Affected Products

Gotenna Pro App

Gotenna Pro X

Gotenna Pro X2

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-47122 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47122 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1839362188269515061 · Twitter Post
• https://twitter.com/CVEnew/status/1839358140225298651 · Twitter Post
• https://twitter.com/dailycve/status/1973785508951249132 · Twitter Post
• https://t.me/cvenotify/97298 · Telegram Post
• https://t.me/cvedetector/6448 · Telegram Post
• https://t.me/cvenotify/98600 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-270-04 · Note