CVE-2023-40291

Summary

CVE-2023-40291 is a newly discovered vulnerability affecting Harman Infotainment systems with the version 20190525031613. This issue enables attackers to gain root access to the system via SSH through a USB-to-Ethernet dongle, using a password that is an internal project name. An unauthorized user who obtains physical access to the vehicle can exploit this weakness, posing a significant risk to vehicle security. The vulnerability can lead to complete system compromise and potential data theft or manipulation. Users are advised to update their systems as soon as a patch is available to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.