CVE-2024-41715
Last modified
CVE-2024-41715 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gotenna | Atak Plugin | < 2.0.7 |
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-41715?
How severe is CVE-2024-41715?
How do I fix CVE-2024-41715?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-4171A vulnerability classified as critical has been found in Ten…8.8
- CVE-2024-41710A vulnerability in the Mitel 6800 Series, 6900 Series, and 6…7.2
- CVE-2024-41711A vulnerability in the Mitel 6800 Series, 6900 Series, and 6…6.8
- CVE-2024-41712A vulnerability in the Web Conferencing Component of Mitel M…6.6
- CVE-2024-41713A vulnerability in the NuPoint Unified Messaging (NPM) compo…9.1
- CVE-2024-41714A vulnerability in the Web Interface component of Mitel MiCo…8.8
- CVE-2024-41716Cleartext storage of sensitive information vulnerability exi…8.1
- CVE-2024-41717Kieback & Peter's DDC4000 series is vulnerable to a path tra…9.8
- CVE-2024-41718Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. Consul…
- CVE-2024-41719When generating QKView of BIG-IP Next instance from the BIG-…5.5
- CVE-2024-4172A vulnerability classified as problematic was found in idcCM…4.3
- CVE-2024-41720Incorrect permission assignment for critical resource issue …8
Are you affected by CVE-2024-41715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST