CVE-2023-26244 in Gen5W_L정보

요약

\~에 의해 MITRE • 2023. 04. 27.

An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppDMClient binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml files, which are used during the firmware installation process. This indirectly allows an attacker to use a custom version of AppUpgrade and .lge.upgrade.xml files.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2023. 02. 21.

공개

2023. 04. 27.

모더레이션

수락

항목

VDB-227553

CPE

준비됨

CWE

CWE-345 (확인됨)

CVSS

7.8 (NVD)

EPSS

0.00086

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-26244
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-26244
CVE Details	https://www.cvedetails.com/cve/CVE-2023-26244/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!