What is the severity of CVE-2024-47130?

CVE-2024-47130 has a high severity rating due to its potential for unauthorized remote updates affecting encryption keys.

How do I fix CVE-2024-47130?

To fix CVE-2024-47130, update your goTenna Pro App to the latest version beyond 1.6.1 for iOS and 2.0.3 for Android.

What are the risks associated with CVE-2024-47130?

The risks include unauthorized access to sensitive messages as attackers can remotely update the encryption keys used in communications.

Which versions of goTenna Pro are affected by CVE-2024-47130?

CVE-2024-47130 affects goTenna Pro versions up to 1.6.1 on iOS and versions below 2.0.3 on Android.

Is it safe to use the goTenna Pro App before fixing CVE-2024-47130?

Using the goTenna Pro App before applying the fix for CVE-2024-47130 is not safe as it exposes users to potential exploits.

Vulnerability/
CVE-2024-47130

high

8.8

CWE

306

26/9/2024

17/10/2024

CVE-2024-47130: Missing Authentication for Critical Function in goTenna Pro

First published: Thu Sep 26 2024(Updated: )

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. It is advised to update your app to the current release for enhanced encryption protocols.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
goTenna Pro	<=1.6.1
Gotenna Pro	<2.0.3

Remedy

goTenna recommends that users mitigate these vulnerabilities by performing the following updates: * Android Pro: v2.0.3 or greater * iOS Pro: v2.0.3 or greater

Never miss a vulnerability like this again

Reference Links

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04

Frequently Asked Questions

What is the severity of CVE-2024-47130?
CVE-2024-47130 has a high severity rating due to its potential for unauthorized remote updates affecting encryption keys.
How do I fix CVE-2024-47130?
To fix CVE-2024-47130, update your goTenna Pro App to the latest version beyond 1.6.1 for iOS and 2.0.3 for Android.
What are the risks associated with CVE-2024-47130?
The risks include unauthorized access to sensitive messages as attackers can remotely update the encryption keys used in communications.
Which versions of goTenna Pro are affected by CVE-2024-47130?
CVE-2024-47130 affects goTenna Pro versions up to 1.6.1 on iOS and versions below 2.0.3 on Android.
Is it safe to use the goTenna Pro App before fixing CVE-2024-47130?
Using the goTenna Pro App before applying the fix for CVE-2024-47130 is not safe as it exposes users to potential exploits.

agent/weakness
agent/references
agent/title
agent/first-publish-date
agent/type
agent/author
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/event
agent/severity
agent/last-modified-date
agent/description
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/gotenna
canonical/gotenna pro
version/gotenna pro/1.6.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.