CVE-2024-33309: Tvs Motor Company Connect

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.

Affected products

• Tvs Motor Company Connect: version 4.5.1 only
• Tvs Motor Company IOS: version 5.0.0 only

Published 2024-04-30. Last modified 2026-06-17.