CVE-2024-47130

The goTenna Pro App allows unauthenticated attackers to remotely updatethe local public keys used for P2P and group messages. It is advised toupdate your app to the current release for enhanced encryptionprotocols.

CVE-2024-47125

The goTenna Pro App does not authenticate public keys which allows anunauthenticated attacker to manipulate messages. It is advised to updateyour app to the current release for enhanced encryption protocols.

CVE-2024-47126

The goTenna Pro App does not use SecureRandom when generating passwordsfor sharing cryptographic keys. The random function in use makes iteasier for attackers to brute force this password if the broadcastedencryption key is captured over RF. This only applies to the optionalbroadcast of an encrypti...