159 matches found
CVE-2024-8355
Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...
CVE-2024-8355 Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability
Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...
CVE-2024-8355 Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability
Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...
CVE-2024-8355
The CVE-2024-8355 entry covers a SQL injection in Visteon Infotainment System DeviceManager’s iAP Serial Number handling. The flaw occurs when parsing the iAP Serial number, where an attacker can inject SQL via an unsafely constructed query string, allowing code execution with root privileges on ...
Visteon Infotainment 数据伪造问题漏洞
Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a data forgery vulnerability that arises from insufficient authenticity verification of the firmware image provided during firmware updates to the VIP microcontroller, which could...
Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities
Hackers can exploit critical vulnerabilities in Mazda’s infotainment system, including one that enables code execution via USB, compromising…...
CVE-2024-8355
creationtimestamp| type| source ---|---|--- 2024-11-07 22:09:04+00:00| seen| https://www.thezdi.com/blog/2024/11/7/multiple-vulnerabilities-in-the-mazda-in-vehicle-infotainment-ivi-system 2024-11-09 07:14:12+00:00| seen| https://t.me/truesecator/6412...
CVE-2024-8358
creationtimestamp| type| source ---|---|--- 2024-11-07 22:09:04+00:00| seen| https://www.thezdi.com/blog/2024/11/7/multiple-vulnerabilities-in-the-mazda-in-vehicle-infotainment-ivi-system 2024-11-09 07:14:12+00:00| seen| https://t.me/truesecator/6412...
CVE-2024-8357
creationtimestamp| type| source ---|---|--- 2024-11-07 22:09:04+00:00| seen| https://www.thezdi.com/blog/2024/11/7/multiple-vulnerabilities-in-the-mazda-in-vehicle-infotainment-ivi-system 2024-11-09 07:14:12+00:00| seen| https://t.me/truesecator/6412...
CVE-2024-8360
creationtimestamp| type| source ---|---|--- 2024-11-07 22:09:04+00:00| seen| https://www.thezdi.com/blog/2024/11/7/multiple-vulnerabilities-in-the-mazda-in-vehicle-infotainment-ivi-system 2024-11-09 07:14:12+00:00| seen| https://t.me/truesecator/6412...
(0Day) Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeviceManager. When parsing the iAP Serial number, the proce...
CVE-2023-32156
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...
CVE-2023-32156
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...
CVE-2023-32156 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...
CVE-2023-32156 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...
CVE-2023-32156
CVE-2023-32156 is a Tesla Model 3 Gateway ECU firmware signature validation bypass vulnerability. The issue stems from improper error handling during firmware updates, allowing network-adjacent attackers to execute arbitrary code with the context of the Gateway ECU after gaining the ability to ru...
Skoda Security Breach
Skoda is a line of automobiles from Skoda. A security vulnerability exists in the Skoda Superb III 3V3 version 2.0 TDI that stems from the Real-Time Streaming Protocol not properly handling requests for the /logs URI, allowing an attacker to launch a denial-of-service DOS attack on the infotainme...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...