562 matches found
CVE-2024-36842-Backdooring-Oncord-Android-Sterio-
CVE-2024-36842 后门植入Oncord+安卓车载音响 我们对市场上最畅销的汽车后装信息娱乐单元之一进行了漏洞评估。 利用恶意脚本在Oncord+安卓/苹果车载信息娱乐单元上创建持久后门！ 关于设备： 安卓版本：12 内核版本：4.9.170 型号：TS17/全志科技提供 序列号：0x03125dBa Oncord+的安卓车载音响单元基于先进技术，提供卓越的性能和维护系统。它是印度及其他国家市场上最常见的汽车后装安卓单元之一。 漏洞ID 漏洞 严重性 CVSS评分 NW-VUL-01 通过利用ADB端口获取信息娱乐单元的Root权限 高 - 8.4 HW-VUL-02...
CVE-2020-10558
CVE-2020-10558: Denegación de Servicio DoS en Tesla Model S/3/X Investigador de seguridad: Jacob Archuleta @nullze 📝 Resumen de la vulnerabilidad Se descubrió una vulnerabilidad crítica de Denegación de Servicio DoS en los Tesla Model 3, Model S y Model X todas las versiones anteriores a 2020.4.1...
nOBEX
nOBEX Introducción nOBEX permite emular los perfiles PBAP, MAP y HFP para probar sistemas de infoentretenimiento de vehículos y dispositivos similares que usan estos perfiles. nOBEX proporciona clientes PBAP y MAP para clonar los sistemas de archivos virtuales genuinos de estos perfiles desde un...
JXL_Infotainment_CVE-2025-69515
CVE-2025-69515 攻击名称 📂 附加详情 受影响产品 受影响组件 GNSS接收器模块 / GPS芯片组 信息娱乐导航模块 位置服务框架 攻击向量 信息娱乐单元可能通过使用SDR设备广播虚假GPS信号成为攻击目标。由于GNSS输入路径缺乏完整性验证，系统可能接受从附近传输的更强虚假信号，从而无需物理接触即可远程操纵位置。 CVSS评分：5.4 AV:A（邻近）：攻击者必须处于射频附近才能广播虚假GPS信号 AC:L（低）：除信号传输外无复杂条件 PR:N（无）：无需认证 UI:N（无）：无需用户交互 S:U（不变）：影响仅限于信息娱乐系统 C:N（无）：无数据机密性影响...
JXL_Infotainment_CVE-2025-63895
JXLInfotainmentCVE-2025-63895 CVE-2025-63895 Nombre del ataque 📂 Detalles adicionales Producto afectado Componentes afectados Bluetooth Classic versión 5.0 Pila de firmware Bluetooth Implementación de LMP Servicio Bluetooth de infoentretenimiento Vector de ataque Un atacante dentro del alcance de...
Connected Cars Are a Surveillance Platform
Researchers at Northeastern University, in collaboration with Consumer Reports , evaluated how much modern cars spy in their drivers: The new Northeastern study shows, for the first time, data flowing among the vehicles, the vehicle apps you download when you buy your car, and third-party...
CVE-2026-49318
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49317
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
Exploit for CVE-2022-42005
Tesla Security Research Vulnerability research on the Tesla M...
CVE-2026-49317
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49318
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49318
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49318
This CVE affects the Infotainment / Digital Round display in the Indian Motorcycle Scout Bobber + Tech 2025 model year. The root cause is an incorrect behavior order during boot: the system uses the presence of Wireless Control Module (WCM) traffic as a proxy for whether an immobilizer is fitted....
CVE-2026-49318 Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
EUVD-2026-33313
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49318 Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49317 Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
EUVD-2026-33296
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49317
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CVE-2026-49317
The CVE CVE-2026-49317 affects the Infotainment Digital Round on the Indian Scout Bobber + Tech 2025 model year. The vulnerability arises when the boot window relies on Wireless Control Module (WCM) traffic as a proxy for immobilizer presence. If no WCM messages are observed (e.g., by silencing W...