CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

Harman Infotainment Command Injection Vulnerability

Harman Infotainment is an in-vehicle infotainment system from Harman. A security vulnerability exists in Harman Infotainment 20190525031613 and later versions that originates from allowing an attacker to perform command injection through the use of D-Bus connection objects...

CVE-2023-40292

Harman Infotainment versions 20190525031613 and later disclose the IP address via CarPlay CTRL packets. The vulnerability arises from CarPlay CTRL packet handling in the Harman Infotainment stack, enabling an attacker with access to CarPlay CTRL traffic to learn the device IP. Affected product: H...

CVE-2023-40291: Undefined Security Weakness

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

CVE-2023-40292

Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets...

Harman Infotainment Security Breach

Harman Infotainment is an in-vehicle infotainment system from Harman. A security vulnerability exists in Harman Infotainment version 20190525031613, which originated from a vulnerability that allows an attacker to gain access to internal resources with root privileges via the USB Ethernet transfe...

CVE-2023-40291

Summary: CVE-2023-40291 affects Harman Infotainment (version 20190525031613) and enables root access via SSH over a USB-to-Ethernet dongle, using a password that is an internal project name. The vulnerability originates from weak access control for the USB/SSH interface, allowing physical access ...

Harman Infotainment Security Breach

Harman Infotainment is an in-car infotainment system from Harman. A security vulnerability exists in Harman Infotainment 20190525031613 and later versions, which stems from the CarPlay CTRL packet publicizing the IP address...

CVE-2023-40293: Improper Neutralization of Special Elements used in a Command

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...

CVE-2023-40293

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...

PT-2023-5021 · Harman · Harman Infotainment

Name of the Vulnerable Software and Affected Versions: Harman Infotainment version 20190525031613 Description: The issue allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. This is related to inadequate access control in the navigation and...

PT-2023-27361 · Harman · Harman Infotainment

Name of the Vulnerable Software and Affected Versions: Harman Infotainment versions 20190525031613 and later Description: The issue allows command injection via unauthenticated RPC with a D-Bus connection object. Recommendations: For versions 20190525031613 and later, at the moment, there is no...

PT-2023-27360 · Harman · Harman Infotainment

Name of the Vulnerable Software and Affected Versions: Harman Infotainment versions 20190525031613 and later Description: The issue discloses the IP address via CarPlay CTRL packets. Recommendations: For Harman Infotainment versions 20190525031613 and later, consider restricting access to CarPlay...

CVE-2023-38523

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

CVE-2023-38523

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

Authentication flaw

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

SAMSUNG Harman AMX N-Series 访问控制错误漏洞

SAMSUNG Harman AMX N-Series is a wall plate encoder from Samsung South Korea. A security vulnerability exists in Samsung Harman AMX N-Series devices, which originates from a web interface that can expose sensitive information by listing the /tmp/ directory without authentication. Affected product...

CVE-2023-38523

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

PT-2023-26499 · Samsung · Samsung Harman Amx N-Series N3000 Video Encoder/Decoder +6

Name of the Vulnerable Software and Affected Versions: Samsung Harman AMX N-Series N1115 Wallplate Video Encoder versions prior to 1.15.61 Samsung Harman AMX N-Series N1x22A Video Encoder/Decoder versions prior to 1.15.61 Samsung Harman AMX N-Series N1x33A Video Encoder/Decoder versions prior to...