CVE-2024-41715

MEDIUM

Gotenna Atak Plugin < 2.0.7 - Information Disclosure

Title source: rule

Description

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

References (1)

[Third Party Advisory, US Government Resource] https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05

Scores

CVSS v3 4.3

EPSS 0.0006

EPSS Percentile 17.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-204 CWE-203

Status published

Products (1)

gotenna/atak_plugin < 2.0.7

Published Sep 26, 2024

Tracked Since Feb 18, 2026