CVE-2024-8359

Summary

CVE-2024-8359 is a remote code execution vulnerability affecting Visteon Infotainment systems. The issue lies in the REFLASH_DDU_FindFile function where a crafted software update file can trigger execution of a maliciously constructed system call. attackers who have physical access to the systems can exploit this vulnerability without requiring authentication. Consequently, they can execute arbitrary code in the context of the device. This vulnerability was reported to Zero Day Initiative as ZDI-CAN-23420.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.