msn-official

2 exploits Active since Apr 2024

CVE-2024-33308 WRITEUP CRITICAL WRITEUP

TVS Motor Company Limited TVS Connet <5.0.0 - Privilege Escalation

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.

CVSS 9.1

View Code

CVE-2024-33309 WRITEUP HIGH WRITEUP

TVS Motor Company Limited TVS Connet <4.5.1, 5.0.0 - Info Disclosure

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.

CVSS 7.5

View Code