CVE-2019-14951
Last modified
CVE-2019-14951 is a vulnerability of currently unknown severity. The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the authentication process, which makes it easier for attackers to obtain multimedia-screen access via port 7050 on the cellular network, as demonstrated by a DrivingRestriction method call to uma/jsonrpc/mobile.. EPSS estimates a 1.73% chance of exploitation in the next 30 days.
Description
The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the authentication process, which makes it easier for attackers to obtain multimedia-screen access via port 7050 on the cellular network, as demonstrated by a DrivingRestriction method call to uma/jsonrpc/mobile.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Telenav | Scout Gps Link | >= 1.0.4, <= 1.0.109 |
References
- https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-librariesExploit, Third Party Advisory
- https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-librariesExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14951?
How severe is CVE-2019-14951?
How do I fix CVE-2019-14951?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14946The ultimate-member plugin before 2.0.52 for WordPress has X…
- CVE-2019-14947The ultimate-member plugin before 2.0.52 for WordPress has X…
- CVE-2019-14948The woocommerce-product-addon plugin before 18.4 for WordPre…5.4
- CVE-2019-14949The wp-database-backup plugin before 5.1.2 for WordPress has…6.1
- CVE-2019-1495Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-14950The wp-live-chat-support plugin before 8.0.27 for WordPress …
- CVE-2019-14952JetBrains YouTrack versions before 2019.1.52584 had a possib…6.1
- CVE-2019-14953JetBrains YouTrack versions before 2019.2.53938 had a possib…6.1
- CVE-2019-14954JetBrains IntelliJ IDEA before 2019.2 was resolving the mark…5.9
- CVE-2019-14955In JetBrains Hub versions earlier than 2018.4.11436, there w…5.3
- CVE-2019-14956JetBrains YouTrack before 2019.2.53938 was using incorrect s…4.3
- CVE-2019-14957The JetBrains Vim plugin before version 0.52 was storing ind…5.3
Are you affected by CVE-2019-14951?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST