{"id":"CVE-2024-47125","aliases":["EUVD-2024-42277","GHSA-w3gp-gprx-5vj8"],"status":"published","title":"Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro","description":"The goTenna Pro App does not authenticate public keys which allows an \nunauthenticated attacker to manipulate messages. It is advised to update\n your app to the current release for enhanced encryption protocols.","severity":{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00142,"percentile":0.03618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-923"],"published":"2024-09-26T17:24:20Z","modified":"2026-06-17T07:56:35Z","products":[{"vendor":"emlog","product":"pro"},{"vendor":"gotenna","product":"gotenna_pro"},{"vendor":"gotenna","product":"pro"},{"vendor":"gotenna","product":"pro_app"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04","tags":["government-resource","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47125"},{"url":"https://github.com/advisories/GHSA-w3gp-gprx-5vj8"}],"sources":{"cve":[{"id":"CVE-2024-47125","title":"Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro","description":"The goTenna Pro App does not authenticate public keys which allows an \nunauthenticated attacker to manipulate messages. It is advised to update\n your app to the current release for enhanced encryption protocols.","status":"published","published":"2024-09-26T17:24:20.173Z","modified":"2024-10-17T17:30:55.944Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-923"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-42277","description":"The goTenna Pro App does not authenticate public keys which allows an \nunauthenticated attacker to manipulate messages. It is advised to update\n your app to the current release for enhanced encryption protocols.","status":"published","published":"2024-09-26T17:24:20Z","modified":"2024-10-17T17:30:55Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-w3gp-gprx-5vj8","title":"The goTenna Pro series does not authenticate public keys which allows an unauthenticated attacker...","description":"The goTenna Pro series does not authenticate public keys which allows an unauthenticated attacker to intercept and manipulate messages.","status":"published","published":"2024-09-26T18:31:45Z","modified":"2024-10-04T21:31:29Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-287","CWE-923"],"updated_at":"2026-11-02T14:58:25.22471Z"}],"nvd":[{"id":"CVE-2024-47125","description":"The goTenna Pro App does not authenticate public keys which allows an \nunauthenticated attacker to manipulate messages. It is advised to update\n your app to the current release for enhanced encryption protocols.","status":"published","published":"2024-09-26T18:15:09.43Z","modified":"2026-06-17T07:56:35.08Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-923","CWE-287"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}