Lucene search

K
nvd[email protected]NVD:CVE-2023-40293
HistoryAug 14, 2023 - 4:15 a.m.

CVE-2023-40293

2023-08-1404:15:11
CWE-77
web.nvd.nist.gov
2
harman infotainment
unauthenticated
rpc
command injection
d-bus connection

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.015

Percentile

87.0%

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.

Affected configurations

Nvd
Node
samsungharman_infotainmentMatch20190525031613
VendorProductVersionCPE
samsungharman_infotainment20190525031613cpe:2.3:a:samsung:harman_infotainment:20190525031613:*:*:*:*:*:*:*

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.015

Percentile

87.0%

Related for NVD:CVE-2023-40293