CVE-2024-35537

HIGH

Tvsmotor Tvs Connect - Broken Cryptographic Algorithm

Title source: rule
STIX 2.1

Description

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0008
EPSS Percentile 23.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-327
Status published
Products (2)
tvsmotor/tvs_connect 4.6.0
tvsmotor/tvs_connect 5.0.0
Published Jun 21, 2024
Tracked Since Feb 18, 2026