CVE-2019-14951

7.5 highEPSS 1.7%

High (7.5) in telenav scout gps link. EPSS 1.7% chance of exploitation in the next 30 days.

The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the authentication process, which makes it easier for attackers to obtain multimedia-screen access via port 7050 on the cellular network, as demonstrated by a DrivingRestriction method call to uma/jsonrpc/mobile.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2019-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

telenav:scout_gps_link

References

https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-libraries
https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-libraries

Check your stack JSON