CVE-2023-26243
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-26243
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to create custom firmware that may be installed in the IVI system. Then, an attacker may be able to install a backdoor in the IVI system that may allow him to control it, if it is connected to the Internet through Wi-Fi.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hyundai Gen5W_L 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hyundai Gen5W_L是韩国现代（Hyundai）公司的一个汽车标准导航信息娱乐系统。 Hyundai Gen5W_L存在安全漏洞，该漏洞源于存在信息泄漏漏洞，允许攻击者从内存中读取AES密钥和初始化向量，攻击者可能会利用此漏洞创建可安装在IVI系统中的自定义固件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2023-26243
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-26243
请登录查看更多情报信息。
Same Patch Batch · n/a · 2023-04-27 · 22 CVEs total
| CVE-2023-29489 | 5.3 MEDIUM | Cpanel 跨站脚本漏洞 |
| CVE-2023-25292 | Intermesh BV Group Office 跨站脚本漏洞 | |
| CVE-2023-30380 | Desdev DedeCMS 路径遍历漏洞 | |
| CVE-2023-26244 | Hyundai Gen5W_L 安全漏洞 | |
| CVE-2023-26245 | Hyundai Gen5W_L 安全漏洞 | |
| CVE-2023-26246 | Hyundai Gen5W_L 安全漏洞 | |
| CVE-2022-47758 | Nanoleaf firmware 信任管理问题漏洞 | |
| CVE-2023-31285 | Serenity Serene 跨站脚本漏洞 | |
| CVE-2023-31286 | Serenity Serene 安全漏洞 | |
| CVE-2023-31287 | Serenity Serene 授权问题漏洞 | |
| CVE-2023-31290 | Trust Wallet Core 安全特征问题漏洞 | |
| CVE-2023-30349 | jfinal cms 安全漏洞 | |
| CVE-2023-30338 | Emlog 跨站脚本漏洞 | |
| CVE-2022-31647 | Docker Desktop 后置链接漏洞 | |
| CVE-2022-34292 | Docker Desktop 后置链接漏洞 | |
| CVE-2022-37326 | Docker Desktop 安全漏洞 | |
| CVE-2022-38730 | Docker Desktop 安全漏洞 | |
| CVE-2023-29950 | swfrender 缓冲区错误漏洞 | |
| CVE-2022-25091 | Infopop Ultimate Bulletin Board 安全漏洞 | |
| CVE-2023-25437 | Vtech VCS754 安全漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2023-26243
No comments yet