Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker (with physical access to the vehicle's USB ports) the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images (as long as the attacker obtains access to certain Harman decryption/encryption code) as a consequence of a bug where unsigned images pass a validity check. An attacker could potentially install persistent malicious head unit firmware and execute arbitrary code as the root user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FHI Subaru StarLink Harman音响主机安全漏洞
Vulnerability Description
FHI Subaru StarLink Harman是日本富士重工业（FHI）公司的一款汽车。 FHI Subaru StarLink Harman音响主机2017版本、2018版本和2019版本中的更新机制存在安全漏洞。物理位置上接近的攻击者可利用该漏洞重写音响主机的固件，进而以root用户身份执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A