CVE-2020-8539

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands…

published December 1, 2020

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities. In addition, this executable may be used by an attacker to inject commands to generate CAN frames that are sent into the M-CAN bus (Multimedia CAN bus) of the vehicle.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02319 · 83.3th percentile
Published
2020-12-01T17:48Z
EPSS history
Timeline
  • 01 DEC 17:48Z
    Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands…
    cvelistv5