Harman Infotainment (Samsung) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-14. Vendor: Samsung.

CVEs of Harman Infotainment

• CVE-2023-40292 - CVSS 4.3 (medium), 2023-08-14: Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.
• CVE-2023-40291 - CVSS 6.8 (medium), 2023-08-14: Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name.
• CVE-2023-40293 - CVSS 6.8 (medium), 2023-08-14: Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.