Cyber Resilience

CVE-2025-32886

Medium

Published: 01 May 2025

Published
01 May 2025
Modified
20 June 2025
KEV Added
—
Patch
—
CVSS Score v3.1 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0014 34.1th percentile
Risk Priority 8 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-32886 is a medium-severity Improper Restriction of Communication Channel to Intended Endpoints (CWE-923) vulnerability in Gotenna Mesh Firmware. Its CVSS base score is 4.0 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Network Sniffing (T1040); ranked at the 34.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept…

more

sensitive data.

CWE(s)
CWE-923

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1040 Network Sniffing Credential Access
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.
attack.mitre.org →
T1557 Adversary-in-the-Middle Credential Access
Adversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as [Network Sniffing](https://attack.
attack.mitre.org →
T1565.002 Transmitted Data Manipulation Impact
Adversaries may alter data en route to storage or other systems in order to manipulate external outcomes or hide activity, thus threatening the integrity of the data.
attack.mitre.org →
Why these techniques?

CVE-2025-32886 enables network sniffing via UART/USB access to RF packets; CVE-2025-32881 exposes cleartext sensitive info (GID/phone numbers); CVE-2025-32882 lacks integrity checks allowing message modification; CVE-2025-32885 allows spoofed message injection via SDR, facilitating adversary-in-the-middle positioning and transmitted data manipulation.

Affected Assets

gotenna
mesh firmware
0.25.5
gotenna
gotenna
5.5.3

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AC-18 Wireless Access
addresses: CWE-923

Authorizing wireless access restricts the wireless communication channel to only intended endpoints.

CA-3 Information Exchange
addresses: CWE-923

Approving specific exchanges and documenting interface characteristics restricts communication channels to only intended endpoints and systems.

PE-4 Access Control for Transmission
addresses: CWE-923

Limits physical connectivity to transmission channels, supporting restriction of communication paths to only intended endpoints.

SA-9 External System Services
addresses: CWE-923

Requiring providers to meet communication-channel restrictions and monitoring adherence reduces improper restriction of channels to intended endpoints.

SC-11 Trusted Path
addresses: CWE-923

Mandates restriction of the channel for authentication to only the intended trusted endpoints, blocking unauthorized communication paths.

SC-19 Voice Over Internet Protocol
addresses: CWE-923

Explicit control of VoIP traffic forces organizations to restrict communication channels to only intended endpoints and protocols.

SC-22 Architecture and Provisioning for Name/Address Resolution Service
addresses: CWE-923

Explicit internal/external separation restricts name-resolution channels to their intended communication endpoints.

SC-40 Wireless Link Protection
addresses: CWE-923

Enforces that the wireless communication channel is usable only by intended endpoints, addressing improper channel restriction.

References