Vulnerability Details CVE-2025-32884
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.8%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2025-32884
-
cpe:2.3:a:gotenna:gotenna:5.5.3
-
-
cpe:2.3:o:gotenna:mesh_firmware:1.1.12