An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.
CVE ID: CVE-2025-32886
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.0
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vendor: n/a
Product: n/a
EPSS Score: 0.02% (probability of being exploited)
EPSS Percentile: 2.21% (scored less or equal to compared to others)
EPSS Date: 2025-05-30 (when was this score calculated)