{"vulnerability": "CVE-2025-3288", "sightings": [{"uuid": "04aea361-9ac3-4c99-bfd3-ccc1b2d0bfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755rtao2i", "content": "", "creation_timestamp": "2025-04-08T19:22:36.350515Z"}, {"uuid": "00bf900e-2ede-465f-be90-eb9b71778572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32889\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:L/A:H/C:L/I:L/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:53:35.714Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:50.000000Z"}, {"uuid": "f3861d76-ab0e-4f54-b7a5-935981aee2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3288", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-07", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "3c1bc66c-b7b4-42bb-b332-40e25dadb786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3288", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114308189037550499", "content": "", "creation_timestamp": "2025-04-09T13:15:46.052673Z"}, {"uuid": "8fae030e-17a6-4e3e-a016-3b7dfa8a8ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32888", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14355", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32888\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:L/A:H/C:L/I:L/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:52:22.129Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:51.000000Z"}, {"uuid": "8b1de115-79bb-4158-b811-8e1d55c106d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32882", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14388", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32882\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AC:H/AV:A/A:N/C:N/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T19:49:08.079Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T20:15:49.000000Z"}, {"uuid": "5db58347-a7c8-4449-93a9-11036f57900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32886", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14357", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32886\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:50:00.922Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:53.000000Z"}, {"uuid": "5d9c64b7-b83d-497f-a888-49451c37ec75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32881", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14387", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32881\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T19:52:45.382Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T20:15:45.000000Z"}, {"uuid": "57913447-95d4-4e4b-8e30-61a2a9f171ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32887", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32887\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:H/C:L/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopping.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:51:17.419Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:52.000000Z"}, {"uuid": "758244a8-6443-43dc-93d4-a22c46c1b7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32884", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14361", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32884\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:47:08.226Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:56.000000Z"}, {"uuid": "93f4a9d5-c3da-41df-afb7-9f331b8664d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32885", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14359", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32885\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:48:46.511Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:55.000000Z"}, {"uuid": "61d6ffe9-f259-4716-be4a-ac629f5da62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32880", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks.\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T13:54:14.760Z\n\ud83d\udd17 References:\n1. https://syss.de\n2. https://support.coros.com/hc/en-us/articles/20087694119828-COROS-PACE-3-Release-Notes\n3. https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-029.txt", "creation_timestamp": "2025-06-20T14:43:44.000000Z"}, {"uuid": "8c8c11cb-eeb2-4ac4-b41c-4db64548f32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32883", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32883\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The app there makes it possible to inject any custom message (into existing mesh networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T17:45:48.916Z\n\ud83d\udd17 References:\n1. https://gotenna.com\n2. https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities", "creation_timestamp": "2025-05-01T18:15:57.000000Z"}, {"uuid": "729bb376-eefc-4c13-8277-60926205ebd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3288", "type": "seen", "source": "https://t.me/cvedetector/22491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3288 - Rockwell Automation Arena Unvalidated Data Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3288 \nPublished : April 8, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : A local code execution vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae\u00a0due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. \u00a0If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T19:51:43.000000Z"}, {"uuid": "61e7f0ff-1123-49a8-bb16-4b6abf23befd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32889", "type": "seen", "source": "Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU", "content": "", "creation_timestamp": "2025-05-01T21:02:21.000000Z"}, {"uuid": "865b5b0c-939e-4d9d-bb84-27ffcafc162c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32887", "type": "seen", "source": "Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU", "content": "", "creation_timestamp": "2025-05-01T21:02:21.000000Z"}, {"uuid": "7cb4f684-5535-43cb-abc9-b2157414f8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32888", "type": "seen", "source": "Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU", "content": "", "creation_timestamp": "2025-05-01T21:02:21.000000Z"}]}