CVE-2024-35537

June 21, 2024, 7:15 p.m.

Product(s) Impacted

TVS Connect Android

4.6.0

TVS Connect IOS

5.0.0

Description

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.

Weaknesses

Date

Published: June 21, 2024, 5:15 p.m.

Last Modified: June 21, 2024, 7:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://github.com/aaravavi/TVS-Connect-Application-VAPT