84 matches found
Harman Infotainment Command Injection Vulnerability
Harman Infotainment is an in-vehicle infotainment system from Harman. A security vulnerability exists in Harman Infotainment 20190525031613 and later versions that originates from allowing an attacker to perform command injection through the use of D-Bus connection objects...
CVE-2023-40291
Summary: CVE-2023-40291 affects Harman Infotainment (version 20190525031613) and enables root access via SSH over a USB-to-Ethernet dongle, using a password that is an internal project name. The vulnerability originates from weak access control for the USB/SSH interface, allowing physical access ...
Harman Infotainment Security Breach
Harman Infotainment is an in-car infotainment system from Harman. A security vulnerability exists in Harman Infotainment 20190525031613 and later versions, which stems from the CarPlay CTRL packet publicizing the IP address...
Harman Infotainment Security Breach
Harman Infotainment is an in-vehicle infotainment system from Harman. A security vulnerability exists in Harman Infotainment version 20190525031613, which originated from a vulnerability that allows an attacker to gain access to internal resources with root privileges via the USB Ethernet transfe...
CVE-2023-40293
Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object...
CVE-2023-40292
Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets...
PT-2023-5021 · Harman · Harman Infotainment
Name of the Vulnerable Software and Affected Versions: Harman Infotainment version 20190525031613 Description: The issue allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. This is related to inadequate access control in the navigation and...
PT-2023-27361 · Harman · Harman Infotainment
Name of the Vulnerable Software and Affected Versions: Harman Infotainment versions 20190525031613 and later Description: The issue allows command injection via unauthenticated RPC with a D-Bus connection object. Recommendations: For versions 20190525031613 and later, at the moment, there is no...
PT-2023-27360 · Harman · Harman Infotainment
Name of the Vulnerable Software and Affected Versions: Harman Infotainment versions 20190525031613 and later Description: The issue discloses the IP address via CarPlay CTRL packets. Recommendations: For Harman Infotainment versions 20190525031613 and later, consider restricting access to CarPlay...
CVE-2023-38523
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...
CVE-2023-38523
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...
Authentication flaw
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...
CVE-2023-38523
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...
SAMSUNG Harman AMX N-Series 访问控制错误漏洞
SAMSUNG Harman AMX N-Series is a wall plate encoder from Samsung South Korea. A security vulnerability exists in Samsung Harman AMX N-Series devices, which originates from a web interface that can expose sensitive information by listing the /tmp/ directory without authentication. Affected product...
PT-2023-26499 · Samsung · Samsung Harman Amx N-Series N3000 Video Encoder/Decoder +6
Name of the Vulnerable Software and Affected Versions: Samsung Harman AMX N-Series N1115 Wallplate Video Encoder versions prior to 1.15.61 Samsung Harman AMX N-Series N1x22A Video Encoder/Decoder versions prior to 1.15.61 Samsung Harman AMX N-Series N1x33A Video Encoder/Decoder versions prior to...
CVE-2023-38523
Summary: The Samsung Harman AMX N-Series web UI exposes an unauthenticated directory listing of /tmp/, allowing leakage of sensitive files (e.g., command history and screenshots). Affected products and versions (as documented): N1115 Wallplate Video Encoder prior to 1.15.61 N1x22A/N1x33A/N1x33/ N...
CVE-2023-38523
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder...
jp.harmanaudio.com Cross Site Scripting vulnerability OBB-3158727
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...