7.5
CVE-2024-35537
- EPSS 0.34%
- Veröffentlicht 21.06.2024 17:15:10
- Zuletzt bearbeitet 13.03.2025 15:15:44
- Erkennungen
LoginTVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tvsmotor ≫ Tvs Connect Version 4.6.0 SwPlatform android
Tvsmotor ≫ Tvs Connect Version 5.0.0 SwPlatform iphone_os
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.26 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| CISA-ADP | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
https://github.com/aaravavi/TVS-Connect-Application-VAPT