Vulnerabilities

TI-2024-07752 CVE-2024-8360 · GHSA-v583-6v29-vvg5

OS command injection in Visteon Infotainment

LOW 34

Visteon Infotainment REFLASH_DDU_ExtractFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00882 Published 2024-11-22 No fix listed CWE-78

TI-2024-07751 CVE-2024-8359 · GHSA-rm8x-rgrx-p9v7

LOW 34

Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00881 Published 2024-11-22 No fix listed CWE-78

TI-2024-07750 CVE-2024-8358 · GHSA-mq9q-3729-crjx

LOW 34

Visteon Infotainment UPDATES_ExtractFile Command Injection Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00882 Published 2024-11-22 No fix listed CWE-78

TI-2024-07749 CVE-2024-8357 · GHSA-x4vr-gr9r-q7v6

LOW 36

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00321 Published 2024-11-22 No fix listed CWE-1326

TI-2024-07748 CVE-2024-8356 · GHSA-5x8w-vv68-5w4w

LOW 35

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00171 Published 2024-11-22 No fix listed CWE-345

TI-2024-07747 CVE-2024-8355 · GHSA-6hwj-w495-9pvp

LOW 33

Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0056 Published 2024-11-22 No fix listed CWE-89