{"id":"CVE-2024-47124","aliases":["EUVD-2024-42276","GHSA-r7rh-frh5-cg5j"],"status":"published","title":"Cleartext Transmission of Sensitive Information in goTenna Pro","description":"The goTenna Pro App does not encrypt callsigns in messages. It is \nrecommended to not use sensitive information in callsigns when using \nthis and previous versions of the app and update your app to the current\n app version which uses AES-256 encryption for callsigns in encrypted \noperation.","severity":{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00095,"percentile":0.00648,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2024-09-26T17:21:29Z","modified":"2026-06-17T07:56:34Z","products":[{"vendor":"emlog","product":"pro"},{"vendor":"gotenna","product":"gotenna_pro"},{"vendor":"gotenna","product":"pro"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04","tags":["government-resource","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47124"},{"url":"https://github.com/advisories/GHSA-r7rh-frh5-cg5j"}],"sources":{"cve":[{"id":"CVE-2024-47124","title":"Cleartext Transmission of Sensitive Information in goTenna Pro","description":"The goTenna Pro App does not encrypt callsigns in messages. It is \nrecommended to not use sensitive information in callsigns when using \nthis and previous versions of the app and update your app to the current\n app version which uses AES-256 encryption for callsigns in encrypted \noperation.","status":"published","published":"2024-09-26T17:21:29.975Z","modified":"2024-10-17T17:28:21.392Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-42276","description":"The goTenna Pro App does not encrypt callsigns in messages. It is \nrecommended to not use sensitive information in callsigns when using \nthis and previous versions of the app and update your app to the current\n app version which uses AES-256 encryption for callsigns in encrypted \noperation.","status":"published","published":"2024-09-26T17:21:29Z","modified":"2024-10-17T17:28:21Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-r7rh-frh5-cg5j","title":"The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal...","description":"The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal information about the users and can also be leveraged for other vulnerabilities.","status":"published","published":"2024-09-26T18:31:45Z","modified":"2024-10-07T18:31:02Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:58:25.780996Z"}],"nvd":[{"id":"CVE-2024-47124","description":"The goTenna Pro App does not encrypt callsigns in messages. It is \nrecommended to not use sensitive information in callsigns when using \nthis and previous versions of the app and update your app to the current\n app version which uses AES-256 encryption for callsigns in encrypted \noperation.","status":"published","published":"2024-09-26T18:15:09.31Z","modified":"2026-06-17T07:56:34.927Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}