# CVE-2024-43108

## Summary

- **CVE ID:** CVE-2024-43108
- **Severity:** MEDIUM
- **CVSS Score:** 6 (CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N)
- **CWE:** CWE-353
- **Published:** Sep 26, 2024
- **Last Modified:** Mar 13, 2026

## Description

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, 
encrypted messages without any additional integrity checking mechanisms.
 This leaves messages malleable to an attacker that can access the 
message. It is advised to continue to use encryption in the plugin and 
update to the current release for enhanced encryption protocols.

## Affected Products

- goTenna — Pro ATAK Plugin (0)

## References

- [CNA](https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-05)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.09%
- **EPSS Percentile:** 0.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._