CVE-2024-41722

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This vulnerability can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. It is advised to use encryption shared with local QR code for higher security operations.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-1390

Affected software

No affected versions have been published.

Timeline

Published: Sep 26, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-417234.3Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached CVE-2024-417248.7Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. CVE-2024-417256.1ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site sc CVE-2024-417267.5Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary e CVE-2024-417277.5In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traff CVE-2024-417282.7Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer CVE-2024-417294.3Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is other CVE-2024-41739.8A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated attacker to perform CVE-2024-417309.8In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can CVE-2024-417314.3SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be CVE-2024-417325.4SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depen CVE-2024-417335.3In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacke