Mesh
Vendor:
First CVE: May 1, 2025 · Active for 1 year
9
Total CVEs
More Total CVEs than 86% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mesh over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 1, 2025
14 months ago
Most Recent CVE
May 1, 2025
449 days ago
CVE Severity & Scoring
Mesh9 CVEs
78%
22%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (11.1%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network8 (88.9%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (11.1%)
High0 (0.0%)
None8 (88.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-32889HIGH An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app. | May 1, 2025 | 8.8 | 24 | NO | NO |
CVE-2025-32888HIGH An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app. | May 1, 2025 | 8.8 | 24 | NO | NO |
CVE-2025-32887MEDIUM An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopp | May 1, 2025 | 6.5 | 20 | NO | NO |
CVE-2025-32885MEDIUM An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any | May 1, 2025 | 6.5 | 20 | NO | NO |
CVE-2025-32890MEDIUM An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanis | May 1, 2025 | 6.5 | 19 | NO | NO |
CVE-2025-32884MEDIUM An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is | May 1, 2025 | 6.5 | 19 | NO | NO |
CVE-2025-32882MEDIUM An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mecha | May 1, 2025 | 6.5 | 19 | NO | NO |
CVE-2025-32881MEDIUM An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is | May 1, 2025 | 6.5 | 19 | NO | NO |
CVE-2025-32886MEDIUM An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local acces | May 1, 2025 | 5.5 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Mesh
Top CWEs
Versions
No cataloged versions.