Samsung Harman Infotainment — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Harman Infotainment, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-40291 — CVSS 6.8 (medium): Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project…
• CVE-2023-40293 — CVSS 6.8 (medium): Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.
• CVE-2023-40292 — CVSS 4.3 (medium): Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.