CVE-2019-14951

The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the…

published August 12, 2019

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the authentication process, which makes it easier for attackers to obtain multimedia-screen access via port 7050 on the cellular network, as demonstrated by a DrivingRestriction method call to uma/jsonrpc/mobile.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01732 · 77.4th percentile
Published
2019-08-12T15:15Z
EPSS history
Timeline
  • 12 AUG 15:15Z
    The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the…
    cvelistv5