What’s Vulnerable › Vulnerabilities
CVE-2024-41715: goTenna Pro ATAK Plugin Observable Response Discrepancy
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-26 · updated 2026-06-17
- Weakness: CWE-204
Description
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used.
Affected products
- goTenna Pro ATAK Plugin: before 2.0.7 — fixed in 2.0.7
How to fix
Upgrade to a fixed version: goTenna Pro ATAK Plugin 2.0.7. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-41715 or the next vulnerability affects your stack