goTenna vulnerabilities
We track 3 vulnerabilities in goTenna products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2025.
Latest goTenna vulnerabilities
- 8.8 High severity
Mesh Firmware: Use of Hard-coded Credentials
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app.
- 8.8 High severity
Mesh Firmware: Use of Hard-coded Credentials
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app.
- 8.8 High severity
Pro: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the broadcasted encryption key is captured over RF. This only appli