PT-2025-18686 · Gotenna · Gotenna

Published 2025-05-01 · Updated 2025-06-20 · CVE-2025-32886

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions goTenna v1 with application 5.5.3 and firmware 0.25.5

Description A problem was discovered where all packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.

Recommendations For goTenna v1 devices with application 5.5.3 and firmware 0.25.5, consider disabling the USB Shell feature to minimize the risk of exploitation until a patch is available. Restrict local access to the device to prevent unauthorized individuals from intercepting sensitive data.

Fix

Weakness Enumeration

CWE-923

Related Identifiers

CVE-2025-32886

Affected Products

Gotenna

References · 8

• https://osv.dev/vulnerability/CVE-2025-32886 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32886 · Security Note
• https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities · Note
• https://twitter.com/CVEnew/status/1918568515772293547 · Twitter Post
• https://twitter.com/dailycve/status/1936149804490670524 · Twitter Post
• https://gotenna.com · Note
• https://t.me/cvetracker/22838 · Telegram Post
• https://t.me/cvenotify/126279 · Telegram Post