CVE-2023-40293

MediumCVSS 6.8

Published: 14/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.70%

74th percentile - higher than 74% of all known CVEs

Harman Infotainment version 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.

An attacker could exploit this vulnerability to execute unauthorized commands, potentially leading to serious security breaches in the system.

It is recommended to update the software to the latest version and implement appropriate security measures to restrict access to RPC.

Original NVD description (English source)

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.