CVE-2024-47122 Information

Description

In the goTenna Pro application the encryption keys are stored along with a static IV on the device. This allows for complete decryption of keys stored on the device. This allows an attacker to decrypt all encrypted communications that include P2P Group and broadcast messages that use these keys.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-04