CVE-2024-43694

CVE-2024-43694 is a medium-severity vulnerability affecting the goTenna Pro ATAK Plugin application. It involves the storage of encryption keys on the device alongside a static Initialization Vector (IV), enabling complete decryption of these keys. This flaw allows an attacker to decrypt all encrypted broadcast communications if they gain access to the device. The vulnerability has a CVSS score of 6.5, indicating a network-adjacent attack vector with low complexity, requiring no privileges or user interaction, and resulting in high confidentiality impact. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.