PT-2025-18687 · Gotenna · Gotenna

Published 2025-05-01 · Updated 2025-06-20 · CVE-2025-32887

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AC:L/AV:A/A:H/C:L/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions goTenna v1 with application 5.5.3 and firmware 0.25.5

Description A problem was detected in goTenna v1 devices, where a command channel includes the next hop, which can be intercepted and used to interrupt frequency hopping.

Recommendations For goTenna v1 devices with application 5.5.3 and firmware 0.25.5, consider restricting access to the command channel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-32887

Affected Products

Gotenna

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-32887 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32887 · Vendor Advisory
• https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities · Note
• https://t.me/cvetracker/22839 · Telegram Post
• https://twitter.com/dailycve/status/1936159053865976307 · Twitter Post
• https://t.me/cvenotify/126280 · Telegram Post
• https://t.me/latest_high_impact_cve/2250 · Telegram Post
• https://twitter.com/cybercronai/status/1918474498099069366 · Twitter Post
• https://gotenna.com · Note
• https://twitter.com/CVEnew/status/1918568516820844955 · Twitter Post