Command Injection Vulnerability in Harman Infotainment Systems
CVE-2023-40293

6.8MEDIUM

Key Information:

Vendor
Samsung
Status
Harman Infotainment
Vendor
CVE Published:
14 August 2023

Summary

The Harman Infotainment systems, starting from version 20190525031613, have a vulnerability that allows an attacker to execute arbitrary commands through unauthenticated Remote Procedure Calls (RPC) over a D-Bus connection. This vulnerability could potentially enable unauthorized access, allowing malicious actors to exploit the system without proper authentication. Users of affected systems should take caution and implement necessary security measures to mitigate potential risks.

References

https://autohack.in/2023/07/26/dude-its-my-car-how-to-dev...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.