PT-2018-14365 · Subaru+2 · Subaru Starlink+2

Publicado 2018-11-28 · Atualizado 2019-02-05 · CVE-2018-18203

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Subaru StarLink Harman head units 2017, 2018, and 2019

Description A bug in the update mechanism may allow an attacker with physical access to the vehicle's USB ports to rewrite the firmware of the head unit. This is possible because the device accepts modified QNX6 filesystem images, as long as the attacker obtains access to certain Harman decryption/encryption code, due to unsigned images passing a validity check. An attacker could potentially install persistent malicious head unit firmware and execute arbitrary code as the root user.

Recommendations For Subaru StarLink Harman head units 2017, 2018, and 2019, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2018-18203

Produtos afetados

Harman Head Units

Qnx6

Subaru Starlink

Referências · 2

• 🔥 https://github.com/sgayou/subaru_starlink_research · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-18203 · Nota de Segurança