Visteon

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Visteon records in CISA KEV

No Visteon vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Infotainment · all components

TI-2024-07749 CVE-2024-8357 · GHSA-x4vr-gr9r-q7v6

LOW 36

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00321 Published 2024-11-22 No fix listed CWE-1326

TI-2024-07748 CVE-2024-8356 · GHSA-5x8w-vv68-5w4w

LOW 35

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00171 Published 2024-11-22 No fix listed CWE-345

TI-2024-07752 CVE-2024-8360 · GHSA-v583-6v29-vvg5

LOW 34

Visteon Infotainment REFLASH_DDU_ExtractFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00882 Published 2024-11-22 No fix listed CWE-78

TI-2024-07751 CVE-2024-8359 · GHSA-rm8x-rgrx-p9v7

LOW 34

Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00881 Published 2024-11-22 No fix listed CWE-78

TI-2024-07750 CVE-2024-8358 · GHSA-mq9q-3729-crjx

LOW 34

Visteon Infotainment UPDATES_ExtractFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00882 Published 2024-11-22 No fix listed CWE-78