medium5.3
CVE-2025-32890
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
Impact
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gotenna | Mesh Firmware | Version 1.1.12 |
| Gotenna | Gotenna | Version 5.5.3 |