CVE-2024-35537
7.5HIGHTVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.
Published: 6/21/2024Updated: 3/13/2025
Description
TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.
AI AnalysisPowered by AI
Affected Products
tvsmotortvs_connect
4.6.0
tvsmotortvs_connect
5.0.0
References
- https://github.com/aaravavi/TVS-Connect-Application-VAPTExploitThird Party Advisory
- https://github.com/aaravavi/TVS-Connect-Application-VAPTExploitThird Party Advisory