Mesh Firmware@1.1.12 Security Vulnerabilities and Issues — Mesh Firmware@1.1.12 CVE List

Lucene search

GotennaMesh Firmware1.1.12

3 matches found

CVE•added 2025/05/01 6:15 p.m.•40 views

CVE-2025-32890

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message.

6.5CVSS7.1AI score0.0001EPSS

CVE•added 2025/05/01 6:15 p.m.•38 views

CVE-2025-32884

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages.

6.5CVSS4.6AI score0.00015EPSS

CVE•added 2025/05/01 6:15 p.m.•35 views

CVE-2025-32888

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app.

8.8CVSS7.3AI score0.00028EPSS