Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to create custom firmware that may be installed in the IVI system. Then, an attacker may be able to install a backdoor in the IVI system that may allow him to control it, if it is connected to the Internet through Wi-Fi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hyundai Gen5W_L 安全漏洞
Vulnerability Description
Hyundai Gen5W_L是韩国现代(Hyundai)公司的一个汽车标准导航信息娱乐系统。 Hyundai Gen5W_L存在安全漏洞,该漏洞源于存在信息泄漏漏洞,允许攻击者从内存中读取AES密钥和初始化向量,攻击者可能会利用此漏洞创建可安装在IVI系统中的自定义固件。
CVSS Information
N/A
Vulnerability Type
N/A