PT-2023-27360 · Harman · Harman Infotainment

Published 2023-08-13 · Updated 2023-08-21 · CVE-2023-40292

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Harman Infotainment versions 20190525031613 and later

Description The issue discloses the IP address via CarPlay CTRL packets.

Recommendations For Harman Infotainment versions 20190525031613 and later, consider restricting access to CarPlay CTRL packets to minimize the risk of IP address disclosure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-40292

Affected Products

Harman Infotainment

References · 7

• 🔥 https://autohack.in/2023/07/26/dude-its-my-car-how-to-develop-intimacy-with-your-car · Exploit
• https://osv.dev/vulnerability/CVE-2023-40292 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40292 · Security Note
• https://t.me/cibsecurity/68417 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1690963529048657921 · Twitter Post
• https://t.me/cvenotify/56378 · Telegram Post
• https://twitter.com/CVEnew/status/1690934502246277120 · Twitter Post