Vulnerabilities

TI-2023-20288 CVE-2023-39076 · GHSA-v96f-28cg-5h5p

Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox…

LOW 21

Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00354 Published 2023-09-08 No fix listed

TI-2023-13386 CVE-2023-28885 · GHSA-cj8x-r7cp-9cjg

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021…

LOW 32

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00358 Published 2023-03-27 No fix listed CWE-787

TI-2017-09405 CVE-2017-12697 · GHSA-wrhq-39rj-gcxf

Information disclosure in General Motors and Shanghai OnStar iOS Client

LOW 29

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01435 Published 2018-01-09 No fix listed CWE-300

TI-2017-09404 CVE-2017-12695 · GHSA-c8qr-wqjf-46xv

Improper authentication in General Motors and Shanghai OnStar iOS Client

MEDIUM 42

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01852 Published 2018-01-09 No fix listed CWE-287

TI-2017-07060 CVE-2017-9663 · GHSA-6fpg-44rr-wcfj

Cleartext storage of sensitive information in General Motors and Shanghai OnStar iOS…

LOW 35

An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01072 Published 2018-01-09 No fix listed CWE-312