PT-2024-26528 · Tvs · Tvs Connect Ios+1

Aarav Sinha + 1 · Published 2024-06-21 · Updated 2024-06-24 · CVE-2024-35537

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TVS Connect Android version 4.6.0 TVS Connect IOS version 5.0.0

Description The issue concerns the insecure handling of the RSA key pair, potentially allowing attackers to access sensitive information through decryption.

Recommendations For TVS Connect Android version 4.6.0, update to a version that securely handles the RSA key pair. For TVS Connect IOS version 5.0.0, update to a version that securely handles the RSA key pair.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2024-35537

Affected Products

Tvs Connect Android

Tvs Connect Ios

References · 5

• 🔥 https://github.com/aaravavi/TVS-Connect-Application-VAPT · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-35537 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35537 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1804344910276948309 · Twitter Post
• https://t.me/cvenotify/84048 · Telegram Post