CVE-2024-41715

The CVE-2024-41715 vulnerability affects the goTenna Pro ATAK Plugin and is a payload length disclosure in broadcasted frames, where the plugin does not inject extra characters to obfuscate message length, enabling an observer to determine payload length regardless of encryption. Affected product...

CVE-2024-43694

The CVE-2024-43694 issue affects the goTenna Pro ATAK Plugin. Insecure storage of encryption keys with a static IV on the End User Device enables full decryption of device-stored keys and thus all encrypted broadcast communications. Affected versions include goTenna Pro ATAK Plugin prior to the f...