516 matches found
CVE-2023-28895 Hard-coded password for access to power controller chip memory
The password for access to the debugging console of the PoWer Controller chip PWC of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerability found on Škoda Superb III 3V3 - 2.0 TD...
CVE-2023-28895 Hard-coded password for access to power controller chip memory
The password for access to the debugging console of the PoWer Controller chip PWC of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerability found on Škoda Superb III 3V3 - 2.0 TD...
Škoda Modular Infotainment Platform 3 Encryption Issue Vulnerability
Škoda Modular Infotainment Platform 3 MIB3 is a modular infotainment platform from the Czech company Škoda. A security vulnerability exists in Škoda Modular Infotainment Platform 3. An attacker can easily decode the vulnerability...
PT-2023-22036 · Volkswagen · Modular Infotainment Platform 3
Name of the Vulnerable Software and Affected Versions: Modular Infotainment Platform 3 MIB3 affected versions not specified Description: Access to critical Unified Diagnostics Services UDS of the Modular Infotainment Platform 3 MIB3 infotainment is transmitted via Controller Area Network CAN bus ...
Judge rules it’s fine for car makers to intercept your text messages
A federal judge has refused to bring back a class action lawsuit that alleged four car manufacturers had violated Washington state’s privacy laws by using vehicles’ on-board infotainment systems to record customers’ text messages and mobile phone call logs. The judge ruled that the practice doesn...
The vulnerability of the Project Name Handler component in navigation and multimedia systems intended for use in terrestrial vehicles, provided by Harman Infotainment, allows for root access via SSH using a USB-to-Ethernet key with a password.
The vulnerability of the Project Name Handler component in navigation and multimedia systems intended for use in terrestrial vehicles, Harman Infotainment, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain root access via SSH using a...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
CVE-2023-39076
Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...
Chevrolet Equinox Security Breach
Chevrolet Equinox Media Player is an in-vehicle media player from Chevrolet USA. A security vulnerability exists in Chevrolet Equinox version 2021, which stems from injecting random data into the USB storage area, which can lead to a denial of service DoS in the in-car infotainment system...
CVE-2023-40293
Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...
CVE-2023-40293
Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...
CVE-2023-40291
Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...
CVE-2023-40291
Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...
CVE-2023-40292
Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets...
CVE-2023-40293
Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...
CVE-2023-40292
Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets...
