← Back

CVE-2025-32886

nvd nist
Published: May 1, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.

Affected (2)

Gotenna
2 products
Mesh Firmware
Gotenna
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mesh Firmware
Version 0.25.5
Running on/withPlatform Versions
Gotenna
Mesh
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Gotenna
Version 5.5.3

Related CWEs

CWE-923
Improper Restriction of Communication Channel to Intended Endpoints
The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (2)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Product

Timeline

No history available yet.