PT-2025-18672 · Gotenna · Gotenna

Published 2025-05-01 · Updated 2025-06-20 · CVE-2025-32885

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions goTenna v1 devices with app 5.5.3 and firmware 0.25.5

Description A problem was detected in goTenna v1 devices that allows the injection of custom messages into existing networks with any GID and Callsign via a software-defined radio. This issue can be exploited if the device is used in an unencrypted environment or if the cryptography has already been compromised.

Recommendations For goTenna v1 devices with app 5.5.3 and firmware 0.25.5, consider using the device in an encrypted environment to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1390

Related Identifiers

CVE-2025-32885

Affected Products

Gotenna

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-32885 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32885 · Vendor Advisory
• https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities · Note
• https://twitter.com/VulmonFeeds/status/1918139725220647267 · Twitter Post
• https://t.me/cvetracker/22837 · Telegram Post
• https://twitter.com/CVEnew/status/1918568514723692804 · Twitter Post
• https://gotenna.com · Note
• https://t.me/cvenotify/126278 · Telegram Post
• https://twitter.com/dailycve/status/1936158620175175739 · Twitter Post