PT-2024-26528
CVE-2024-35537
·
Published
2024-06-21
·
Updated
2024-06-24
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
TVS Connect Android version 4.6.0
TVS Connect IOS version 5.0.0
Description
The issue concerns the insecure handling of the RSA key pair, potentially allowing attackers to access sensitive information through decryption.
Recommendations
For TVS Connect Android version 4.6.0, update to a version that securely handles the RSA key pair.
For TVS Connect IOS version 5.0.0, update to a version that securely handles the RSA key pair.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾