CyberSecBulletin

Tvs Motor Company vulnerabilities

We track 2 vulnerabilities in Tvs Motor Company products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2024.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Tvs Motor Company vulnerabilities

  • 7.5 High severity

    connect: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2024-33309Tvs Motor Company

    An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.

  • 9.1 Critical severity

    connect: Improper Privilege Management

    CVE-2024-33308Tvs Motor Company

    An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.