CVE-2024-43694

5.1 mediumEPSS 0.1%

Medium (5.1) in gotenna atak plugin. EPSS 0.1% chance of exploitation in the next 30 days.

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted broadcast communications based on broadcast keys stored on the device.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-922
Published: 2024-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gotenna:atak_plugin

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05

Check your stack JSON