CVE-2023-38523: Missing Authentication for Critical Function

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

CVE-2023-38523

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...

CVE-2023-38523

Summary: The Samsung Harman AMX N-Series web UI exposes an unauthenticated directory listing of /tmp/, allowing leakage of sensitive files (e.g., command history and screenshots). Affected products and versions (as documented): N1115 Wallplate Video Encoder prior to 1.15.61 N1x22A/N1x33A/N1x33/ N...

jp.harmanaudio.com Cross Site Scripting vulnerability OBB-3158727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Command injection

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

CVE-2019-11224

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

CVE-2019-11224

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

CVE-2019-11224

Summary: CVE-2019-11224 affects Harman AMX MVP5150 devices (v2.87.13). The connected exploit repository documents a remote OS command injection vulnerability through the device’s command handling (notably a Telnet/console context and a vulnerable ping function). Proof-of-concept steps show comman...

CVE-2019-11224

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

CVE-2019-11224: Improper Neutralization of Special Elements used in an OS Command

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

HARMAN AMX MVP5150 Command Execution Vulnerability

The Harman AMX MVP5150 is an audio and video system device. A command injection vulnerability exists in the Harman AMX MVP5150 v2.87.13 device, which allows an attacker to perform remote operating system command injection...

CVE-2018-18203

A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker with physical access to the vehicle's USB ports the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images as lo...

Code injection

A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker with physical access to the vehicle's USB ports the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images as lo...

CVE-2018-18203

A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker with physical access to the vehicle's USB ports the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images as lo...

CVE-2018-18203

The CVE-2018-18203 entry describes a vulnerability in Subaru StarLink Harman head units (2017–2019) where the update mechanism accepts modified QNX6 filesystem images due to a check that permits unsigned images. With physical access to the vehicle’s USB ports, an attacker could rewrite the head u...

PT-2018-14365

Name of the Vulnerable Software and Affected Versions Subaru StarLink Harman head units 2017, 2018, and 2019 Description A bug in the update mechanism may allow an attacker with physical access to the vehicle's USB ports to rewrite the firmware of the head unit. This is possible because the devic...

CVE-2018-18203: Improper Verification of Cryptographic Signature

A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker with physical access to the vehicle's USB ports the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images as lo...

The vulnerability of the microprogramming software of the Harman AMX multimedia stream management system allows a intruder to gain access to protected information.

The vulnerability of the setUpSubtleUserAccount/bin/bw function in the Harman AMX multimedia stream management software is related to the existence of a strictly encrypted password for the 1MB@tMaN account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access ...

The vulnerability of the microprogramming software of the Harman AMX multimedia stream management system allows a intruder to gain access to protected information.

The vulnerability of the setUpSubtleUserAccount/bin/bw function in the Harman AMX multimedia stream management software exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Unspecified Vulnerability in Harman AMX

Harman AMX is a series of conversion controller products from Harman USA. A security vulnerability exists in the 'setUpSubtleUserAccount' function in the /bin/bw URI in versions of Harman AMX prior to 2016-01-20, which stems from the use of a hard-coded password for the 1MB@tMaN account. A remote...