Multiple vulnerabilities have been reported in Tata Motors iRA and iRA.ev applications, which could allow an attacker to obtain sensitive credentials or access to vehicle related information and services.

Risk Assessment:Risk of unauthorized access to sensitive information, user impersonation and unauthorized modification of application data.

Impact Assessment:Potential for unauthorized access and modification of data with the privileges of the impersonated user.