CVE-2024-35537 Weak cryptography in n/a
Attackers can decrypt sensitive information due to insecure RSA key handling in the TVS Connect mobile application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-35537?
CVE-2024-35537 is a high-severity vulnerability in n/a, published on 21 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption.
Weakness: CWE-327
Which versions are affected by CVE-2024-35537?
It affects 1 product.
Products include Tvsmotor Tvs Connect.
How do I fix CVE-2024-35537?
No fix has been published for CVE-2024-35537 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-35537 being exploited?
There is no known exploitation of CVE-2024-35537 in the wild and no public exploit code.
Sources
Also known as GHSA-cg88-8hv4-jpxm.