CVE-2024-36842

Summary

CVE-2024-36842 is a newly identified vulnerability affecting Oncord+ Android Infotainment Systems running on OS Android 12, Model Hardware TS17, and Build Number PlatformVER:K24-2023/05/09-v0.01. This issue enables a remote attacker to exploit the ADB (Android Debug Bridge) port component, gaining the ability to execute arbitrary code. The vulnerability poses a significant security risk, as the ADB port is typically disabled by default but can be easily enabled, providing an attack vector for potential assailants to manipulate the system remotely. System administrators are advised to take immediate action to patch the affected systems or disable the ADB port to prevent potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.