CVE-2024-35537

HIGH

TVS Connect Android 4.6.0 and iOS 5.0.0 - Use of a Broken or Risky Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0034
EPSS Percentile 26.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-327
Status published
Products (2)
tvsmotor/tvs_connect 4.6.0
tvsmotor/tvs_connect 5.0.0
Published Jun 21, 2024
Tracked Since Feb 18, 2026