CVE-2024-41931
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Sep 26, 2024
Updated: Oct 17, 2024
CWE ID 201
Summary
CVE-2024-41931 is a vulnerability affecting the goTenna Pro ATAK Plugin. The issue lies in the unencrypted transmission of encryption key names over RF through broadcast messages. This weakness poses a security risk, as adversaries may intercept and use these keys for unauthorized access to communications. To mitigate this vulnerability, it is recommended to share encryption keys through local QR codes instead of broadcast messages.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.