PT-2024-32426 · Gotenna · Gotenna Pro X+2

Clayton Smith + 2 · Published 2024-09-26 · Updated 2024-10-17 · CVE-2024-47130

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions goTenna Pro App (affected versions not specified) goTenna Pro X (affected versions not specified) goTenna Pro X2 (affected versions not specified)

Description The goTenna Pro series allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. This issue affects the encryption protocols used by the app.

Recommendations For goTenna Pro App, update your app to the current release for enhanced encryption protocols. For goTenna Pro X, update your app to the current release for enhanced encryption protocols. For goTenna Pro X2, update your app to the current release for enhanced encryption protocols.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-47130

Affected Products

Gotenna Pro App

Gotenna Pro X

Gotenna Pro X2

References · 9

• https://osv.dev/vulnerability/CVE-2024-47130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47130 · Security Note
• https://t.me/cvenotify/98608 · Telegram Post
• https://twitter.com/CveFindCom/status/1839364840458236085 · Twitter Post
• https://t.me/cvenotify/97066 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1839369871450112058 · Twitter Post
• https://t.me/cvedetector/6436 · Telegram Post
• https://twitter.com/CVEnew/status/1839358126677700751 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-270-04 · Note