PT-2023-20560

Name of the Vulnerable Software and Affected Versions Hyundai Gen5W L in-vehicle infotainment system version AE E PE EUR.S5W L001.001.211214 Description An issue was discovered in the Hyundai Gen5W L in-vehicle infotainment system. The AppUpgrade binary file, which is used during the firmware...

Hyundai Gen5W_L 安全漏洞

Hyundai Gen5WL is an automotive standard navigation infotainment system from Hyundai, South Korea. A security vulnerability exists in the Hyundai Gen5WL, which stems from an information leakage vulnerability that allows an attacker to read AES keys and initialization vectors from memory, which...

CVE-2023-26246

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to...

PT-2023-20558

Name of the Vulnerable Software and Affected Versions Hyundai Gen5W L in-vehicle infotainment system version AE E PE EUR.S5W L001.001.211214 Description An issue was discovered in the Hyundai Gen5W L in-vehicle infotainment system. The decryption binary used to decrypt firmware files has an...

CVE-2023-26245

Hyundai Gen5W_L in-vehicle infotainment system (AE_E_PE_EUR.S5W_L001.001.211214) is affected. The AppUpgrade binary used during firmware installation can be modified by an attacker to bypass the version check, enabling installation of arbitrary firmware versions (newer, older, or customized) and ...

CVE-2023-26246

The CVE-2023-26246 issue affects Hyundai Gen5W_L in-vehicle infotainment systems AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary used during firmware installation can be modified to bypass the digital signature check, enabling an attacker to install custom firmware on the IVI system. This ...

CVE-2023-26245

An issue was discovered in the Hyundai Gen5WL in-vehicle infotainment system AEEPEEUR.S5WL001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the version check in order to install any firmware version e.g.,...

CVE-2023-26244

CVE-2023-26244 affects Hyundai Gen5W_L in-vehicle infotainment. The issue: attacker can modify the AppDMClient binary used during firmware installation to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml, enabling use of a custom AppUpgrade/.lge.upgrade.xml during updates. Ro...

PT-2023-9792 · Visteon · Visteon Infotainment App Soc

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment App SoC affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. Although authentication is required to exploit this...

PT-2023-9795 · Visteon · Visteon Infotainment

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit th...

PT-2023-9793 · Visteon · Visteon Infotainment

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit th...

PT-2023-9794 · Visteon · Visteon Infotainment

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit th...

PT-2023-9791 · Visteon · Visteon Infotainment

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

Design/Logic Flaw

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

CVE-2023-28885

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

PT-2023-22032 · Mylink · Mydlink+

Name of the Vulnerable Software and Affected Versions: MyLink infotainment system version 2021.3.26 Description: The issue allows attackers to cause a denial of service, resulting in a temporary failure of Media Player functionality, via a crafted MP3 file. Recommendations: For MyLink infotainmen...

General Motors Chevrolet Equinox 2021 缓冲区错误漏洞

Chevrolet Equinox Media Player is an in-vehicle media player from Chevrolet USA. A security vulnerability exists in the MyLink infotainment system of the General Motors Chevrolet Equinox 2021. An attacker could exploit this vulnerability to cause a denial of service temporary disabling of the med...

CVE-2023-28885

CVE-2023-28885 affects the MyLink infotainment system in GM Chevrolet Equinox 2021 (build 2021.3.26). The vulnerability allows a crafted MP3 file to trigger a denial of service, causing a temporary failure of Media Player functionality. The issue is driven by the MP3 input handling in the affecte...