goTenna V1 Cleartext Transmission of Sensitive Information Vulnerability

A vulnerability exists in goTenna V1 devices running app version 5.5.3 and firmware 0.25.5. By default, the Group ID (GID) transmitted is the user's phone number, a sensitive piece of information that can be linked to individuals. The application fails to encrypt the GID in messages, leaving personal information exposed.

Impact

Exploitation of this vulnerability allows for the interception of unencrypted personal information, specifically the user's phone number, which is transmitted as the Group ID (GID) in messages.