Vendors / Hyundai Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now Hyundai records in CISA KEV No Hyundai vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 71
In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00248 · Published 2025-08-27 · No fix listed CWE-79
Priority HIGH 69
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2023-04-27 · No fix listed CWE-863
Priority HIGH 69
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2023-04-27 · No fix listed CWE-863
Priority HIGH 69
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2023-04-27 · No fix listed CWE-22
Priority LOW 37
A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02096 · Published 2017-04-26 · No fix listed CWE-321
Priority LOW 36
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2023-04-27 · No fix listed CWE-863
Priority LOW 32
A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay.
CVSS 3.1 HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.0034 · Published 2023-09-03 · No fix listed CWE-294
Priority LOW 30
The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive v…
CVSS 3.1 MEDIUM 6.4· Adjacent network · No auth · User interaction · EPSS 0.00901 · Published 2022-08-24 · No fix listed CWE-294
Priority LOW 19
A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4.
CVSS 3.1 LOW 3.7· Adjacent network · No auth · User interaction · EPSS 0.00598 · Published 2017-04-26 · No fix listed CWE-300
Open these records in search → All records by CVSS severity
0 7 1 1 0
THREATIST.IORead the docs