PT-2024-32420 · Gotenna · Gotenna Pro X+3

Clayton Smith + 2 · Published 2024-09-26 · Updated 2024-10-17 · CVE-2024-47125

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions goTenna Pro App (affected versions not specified) goTenna Pro X (affected versions not specified) goTenna Pro X2 (affected versions not specified) goTenna Pro series (affected versions not specified)

Description The issue allows an unauthenticated attacker to manipulate messages due to the lack of public key authentication. This can lead to message interception and manipulation. It is recommended to update the app to the current release for enhanced encryption protocols.

Recommendations For goTenna Pro App, update to the current release for enhanced encryption protocols. For goTenna Pro X, update to the current release for enhanced encryption protocols. For goTenna Pro X2, update to the current release for enhanced encryption protocols. For goTenna Pro series, update to the current release for enhanced encryption protocols.

Fix

Improper Authentication

Weakness Enumeration

CWE-923

CWE-287

Related Identifiers

CVE-2024-47125

Affected Products

Gotenna Pro App

Gotenna Pro X

Gotenna Pro X2

Gotenna Pro Series

References · 8

• https://osv.dev/vulnerability/CVE-2024-47125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47125 · Security Note
• https://t.me/cvedetector/6443 · Telegram Post
• https://t.me/cvenotify/97087 · Telegram Post
• https://t.me/cvenotify/98603 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1839371152155668579 · Twitter Post
• https://twitter.com/CVEnew/status/1839358135984881870 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-270-04 · Note