CVE-2023-39373

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 3, 2023
Updated: Sep 7, 2023
CWE ID 294

Summary

CVE-2023-39373 refers to a vulnerability affecting certain Hyundai models from 2017. This issue, classified as an Authentication Bypass by Capture-replay (CWE-294), allows an attacker to bypass the authentication process. By intercepting and replaying valid authentication credentials, unauthorized access to the affected system can be gained. This vulnerability poses a significant risk, potentially granting attackers control over various vehicle functions and access to sensitive user data. Users are strongly encouraged to apply the necessary security patches as soon as they become available to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share