Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22g2-gpw7-9pqh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.

EPSS

Процентиль: 5%
0.00024
Низкий

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 6.8
nvd
больше 4 лет назад

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.

EPSS

Процентиль: 5%
0.00024
Низкий

Дефекты

CWE-354