{"id":"CVE-2024-45838","aliases":["EUVD-2024-41625","GHSA-jg3f-p7fw-74wx"],"status":"published","title":"goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information","description":"The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It \nis advised to not use sensitive information in callsigns when using this\n and previous versions of the plugin. Update to current plugin version \nwhich uses AES-256 encryption for callsigns in encrypted operation","severity":{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0009,"percentile":0.00431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2024-09-26T17:31:45Z","modified":"2026-06-17T07:54:54Z","products":[{"vendor":"gotenna","product":"gotenna"},{"vendor":"gotenna","product":"pro atak plugin"},{"vendor":"gotenna","product":"pro_atak_plugin"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05","tags":["government-resource","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45838"},{"url":"https://github.com/advisories/GHSA-jg3f-p7fw-74wx"}],"sources":{"cve":[{"id":"CVE-2024-45838","title":"goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information","description":"The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It \nis advised to not use sensitive information in callsigns when using this\n and previous versions of the plugin. Update to current plugin version \nwhich uses AES-256 encryption for callsigns in encrypted operation","status":"published","published":"2024-09-26T17:31:45.575Z","modified":"2024-10-17T16:54:51.865Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41625","description":"The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It \nis advised to not use sensitive information in callsigns when using this\n and previous versions of the plugin. Update to current plugin version \nwhich uses AES-256 encryption for callsigns in encrypted operation","status":"published","published":"2024-09-26T17:31:45Z","modified":"2024-10-17T16:54:51Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-jg3f-p7fw-74wx","title":"The goTenna Pro ATAK Plugin does not encrypt the callsigns of its users.\n These callsigns reveal...","description":"The goTenna Pro ATAK Plugin does not encrypt the callsigns of its users.\n These callsigns reveal information about the users and can also be \nleveraged for other vulnerabilities.","status":"published","published":"2024-09-26T18:31:45Z","modified":"2024-09-26T18:31:51Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:58:21.32771Z"}],"nvd":[{"id":"CVE-2024-45838","description":"The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It \nis advised to not use sensitive information in callsigns when using this\n and previous versions of the plugin. Update to current plugin version \nwhich uses AES-256 encryption for callsigns in encrypted operation","status":"published","published":"2024-09-26T18:15:08.17Z","modified":"2026-06-17T07:54:54.53Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}