goTenna Mesh Custom Encryption Vulnerability Allowing Message Manipulation
Vulnerability
A vulnerability exists in goTenna Mesh devices running app version 5.5.3 and firmware 1.1.12. The issue arises from a custom encryption implementation that lacks proper integrity checks, making it possible for an attacker to alter messages. This vulnerability was reported to goTenna in 2017 and 2018, but the company discontinued support for goTenna Mesh in 2024.
Impact
Exploitation of this vulnerability allows for the manipulation of messages sent between devices on the goTenna Mesh network.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.5remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.