4.3

CVE-2017-6052

A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to access or influence communications between the identified endpoints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hyundai ≫ Blue Link Version 3.9.4
Hyundai ≫ Blue Link Version 3.9.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.439
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.7 1.2 2.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
NIST 4.3 5.5 4.9
AV:A/AC:M/Au:N/C:P/I:P/A:N
CWE-300 Channel Accessible by Non-Endpoint

The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.

http://www.securityfocus.com/bid/98033
Third Party Advisory
VDB Entry
https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03
Third Party Advisory
US Government Resource