What is CVE-2024-43108?

CVE-2024-43108 is a medium-severity vulnerability in Gotenna, classified under CWE-353. CVSS score: 5.3/10. Published 2024-09-26.

How severe is CVE-2024-43108?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Gotenna

CVE-2024-43108

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is advised to continue to use encryption in the plugin and update to the current release for enhanced encryption protocols.

EPSS: 0.001 (0.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Gotenna
Gotenna Pro Atak Plugin — versions 0

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, government-resource)

Frequently asked questions

What is CVE-2024-43108?: CVE-2024-43108 is a medium-severity vulnerability in Gotenna, classified under CWE-353. CVSS score: 5.3/10. Published 2024-09-26.
How severe is CVE-2024-43108?: Medium severity. CVSS v3 base score is 5.3 out of 10.