Chevrolet Equinox Security Breach

Chevrolet Equinox Media Player is an in-vehicle media player from Chevrolet USA. A security vulnerability exists in Chevrolet Equinox version 2021, which stems from injecting random data into the USB storage area, which can lead to a denial of service DoS in the in-car infotainment system...

CVE-2023-39075

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R builds 11.10.2021 to 16.01.2023 allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device...

CVE-2023-39075

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R builds 11.10.2021 to 16.01.2023 allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device...

CVE-2023-39075

Vulnerability focus: Renault Zoe EV 2021 infotainment system (versions 283C35202R–283C35519R; builds 11.10.2021–16.01.2023) can be crashed by sending arbitrary USB data to a connected USB device. The NVD entry reports CVSS v3.1 base score 4.6 (Medium) with Physical attack vector and No user inter...

PT-2023-26776 · Renault · Renault Zoe Ev

Name of the Vulnerable Software and Affected Versions: Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R Description: The issue allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device. Recommendations: For versions...

Renault Zoe EV Security Vulnerability

The Renault Zoe EV is an automobile from Renault. A security vulnerability exists in the Renault Zoe EV 2021 automotive infotainment system versions 283C35202R through 283C35519R, 11.10.2021 through 16.01.2023, which originates from a vulnerability that could allow an attacker to compromise the...

PT-2023-23642 · Tesla · Tesla Model 3

Name of the Vulnerable Software and Affected Versions: Tesla Model 3 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected vehicles. The flaw exists within the handling of firmware updates, resulting from improper...

CVE-2023-34733

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

Volkswagen Discover Media Infotainment System 代码问题漏洞

The Volkswagen Discover Media Infotainment System is an in-car media navigation system from Volkswagen Germany. A security vulnerability exists in Volkswagen Discover Media Infotainment System version 0876, which stems from a lack of exception handling. An attacker could cause a denial of service...

PT-2023-24988 · Volkswagen · Volkswagen Discover Media Infotainment System

Name of the Vulnerable Software and Affected Versions: Volkswagen Discover Media Infotainment System Software version 0876 Description: A lack of exception handling in the software allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the...

CVE-2023-34733

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-34733

Affects: Volkswagen Discover Media Infotainment System Software v0876. Root cause: lack of exception handling in the software, enabling a Denial of Service via crafted media files when a USB device is connected (plug‑and‑play). Impact: DoS with high confidentiality/integrity/availability impact p...

CVE-2023-26245

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the version check in order to install any firmware version e.g.,...

CVE-2023-26246

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to...

CVE-2023-26243

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to...

CVE-2023-26246

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to...

Design/Logic Flaw

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppDMClient binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml...

Design/Logic Flaw

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to...

CVE-2023-26246

The CVE-2023-26246 issue affects Hyundai Gen5W_L in-vehicle infotainment systems AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary used during firmware installation can be modified to bypass the digital signature check, enabling an attacker to install custom firmware on the IVI system. This ...

Hyundai Gen5W_L 安全漏洞

The Hyundai Gen5WL is an automotive standard navigation infotainment system from Hyundai, South Korea. The Hyundai Gen5WL suffers from a security vulnerability that originates from an attacker being able to modify the AppDMClient binary file used during the firmware installation process to bypass...