Command Channel Vulnerability in goTenna Devices by goTenna
CVE-2025-32887

6.5MEDIUM

Key Information:

Vendor

goTenna

Status
goTenna v1
Vendor
CVE Published:
1 May 2025

What is CVE-2025-32887?

A vulnerability has been identified in goTenna v1 devices that may allow an attacker to intercept commands sent over the channel. This exploitation can disrupt the device's frequency hopping mechanism, potentially leading to unauthorized access or manipulation of communication. Users of app version 5.5.3 and firmware 0.25.5 are particularly at risk due to the nature of the command channel design.

References

https://gotenna.com
https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnera...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.