Lucene search

CVE-2020-8539

🗓️ 01 Dec 2020 18:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

Kia Motors Head Unit software vulnerability allowing unauthorized command injection

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-8539	1 Dec 202017:48	–	cvelist
Prion	Input validation	1 Dec 202018:15	–	prion
NVD	CVE-2020-8539	1 Dec 202018:15	–	nvd
Metasploit	KOFFEE - Kia OFFensivE Exploit	7 Apr 202109:33	–	metasploit
Circl	CVE-2020-8539	6 Feb 202503:13	–	circl
Rapid7 Blog	Metasploit Wrap-Up	30 Apr 202117:42	–	rapid7blog

Nvd

Node

kia head_unit_firmwareMatchsop.003.30.18.0703

kia head_unit_firmwareMatchsop.005.7.181019

kia head_unit_firmwareMatchsop.007.1.191209

AND

kia head_unitMatch-

Source	Link
gist	www.gist.github.com/gianpyc/4dc8b0d0c29774a10a97785711e325c3
sowhat	www.sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf

Parameter	Position	Path	Description	CWE
CMD_PAYLOAD	binary	/system/bin/micomd	The micomd binary is used to send arbitrary commands to the head unit allowing control over various functionalities.	CWE-276

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Dec 2020 18:15Current

7.6High risk

Vulners AI Score7.6

CVSS24.6

CVSS37.8

EPSS0.06372

CWE-276