Main Vulnerability Database Vulnerabilities #VU97787

Missing Authentication for Critical Function in goTenna Pro App for iOS and goTenna Pro App for Android - CVE-2024-47130

Published: September 30, 2024

Vulnerability identifier: #VU97787

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-47130

CWE-ID: CWE-306

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to missing authentication for critical function. A remote attacker on the local network can update the local public keys used for P2P and Group messages.

Affected software

goTenna Pro App for iOS
goTenna Pro App for Android

How to mitigate CVE-2024-47130

Install updates from vendor's website.

goTenna Pro App for Android - update to 2.0.3

External References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04

Related Security Bulletins