CVE-2024-33308 Privilege escalation in n/a
A remote attacker can escalate privileges via the Emergency Contact Feature in the TVS Connet mobile application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-33308?
CVE-2024-33308 is a critical vulnerability in n/a, published on 30 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.
Weakness: CWE-269
Which versions are affected by CVE-2024-33308?
How do I fix CVE-2024-33308?
No fix has been published for CVE-2024-33308 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-33308 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-33308 exists.
Sources
Also known as GHSA-m67v-rhjq-4r57.