CVE-2024-33308

2024-04-3000:00:00

mitre

github.com

tvs motor company

tvs connet

android v.4.5.1

ios v.5.0.0

privilege escalation

emergency contact feature

AI Score

6.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:tvs_motor_company:connect:*:*:*:*:*:*:*:*"
    ],
    "vendor": "tvs_motor_company",
    "product": "connect",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.1"
      },
      {
        "status": "affected",
        "version": "5.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]