CVE-2024-43694 — goTenna Pro ATAK Plugin Insecure Storage of Sensitive Information
In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the devi…
Published: 2024-09-26 · CVSS: 5.1 · CVSS 4.0
In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7