{"id":"CVE-2024-47129","aliases":["EUVD-2024-42281","GHSA-wq63-c6fv-j4j6"],"status":"published","title":"Observable Response Discrepancy in goTenna Pro","description":"The goTenna Pro App does not inject extra characters into broadcasted \nframes to obfuscate the length of messages. This makes it possible to \ntell the length of the payload regardless of the encryption used.","severity":{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00135,"percentile":0.02992,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-203","CWE-204"],"published":"2024-09-26T17:30:12Z","modified":"2026-06-17T07:56:35Z","products":[{"vendor":"emlog","product":"pro"},{"vendor":"gotenna","product":"gotenna_pro"},{"vendor":"gotenna","product":"pro"},{"vendor":"gotenna","product":"pro_app"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04","tags":["government-resource","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47129"},{"url":"https://github.com/advisories/GHSA-wq63-c6fv-j4j6"}],"sources":{"cve":[{"id":"CVE-2024-47129","title":"Observable Response Discrepancy in goTenna Pro","description":"The goTenna Pro App does not inject extra characters into broadcasted \nframes to obfuscate the length of messages. This makes it possible to \ntell the length of the payload regardless of the encryption used.","status":"published","published":"2024-09-26T17:30:12.759Z","modified":"2024-10-17T17:40:06.968Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-42281","description":"The goTenna Pro App does not inject extra characters into broadcasted \nframes to obfuscate the length of messages. This makes it possible to \ntell the length of the payload regardless of the encryption used.","status":"published","published":"2024-09-26T17:30:12Z","modified":"2024-10-17T17:40:06Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-wq63-c6fv-j4j6","title":"The goTenna Pro has a payload length vulnerability that makes it possible to tell the length of...","description":"The goTenna Pro has a payload length vulnerability that makes it possible to tell the length of the payload regardless of the encryption used.","status":"published","published":"2024-09-26T18:31:45Z","modified":"2024-10-04T18:32:13Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-204"],"updated_at":"2026-11-02T14:58:25.22471Z"}],"nvd":[{"id":"CVE-2024-47129","description":"The goTenna Pro App does not inject extra characters into broadcasted \nframes to obfuscate the length of messages. This makes it possible to \ntell the length of the payload regardless of the encryption used.","status":"published","published":"2024-09-26T18:15:09.913Z","modified":"2026-06-17T07:56:35.683Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-204","CWE-203"],"updated_at":"2026-11-02T14:10:29.044588Z"}]}}