Sensitive Information Exposure in goTenna Mesh Devices by goTenna
CVE-2025-32884

4.3MEDIUM

Key Information:

Vendor

goTenna

Status
goTenna Mesh
Vendor
CVE Published:
1 May 2025

What is CVE-2025-32884?

A vulnerability has been identified in goTenna Mesh devices where user phone numbers, which serve as the Group ID (GID) by default, may be exposed in unencrypted messages. This poses a significant risk to user privacy since phone numbers are sensitive data that can be easily linked back to individuals. Without proper encryption, these identifiers can be intercepted, leading to potential privacy breaches and misuse of personal information.

References

https://gotenna.com
https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnera...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.