CVE-2024-35537

TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2024-06-21

Last modified

2025-03-13

Weaknesses

CWE-327

Affected products

• Tvs Connect (Tvsmotor)

References

• https://github.com/aaravavi/TVS-Connect-Application-VAPT