Vulnerabilities > CVE-2024-41715 - Information Exposure Through Discrepancy vulnerability in Gotenna Atak Plugin

047910
CVSS 4.3 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
low complexity
gotenna
CWE-203

Summary

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.

Vulnerable Configurations

Part Description Count
Application
Gotenna
1

Common Weakness Enumeration (CWE)