CVE-2023-40293

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-402946.5libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c.CVE-2023-402958.8libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.CVE-2023-402967.5async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP CVE-2023-402977.5Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component.CVE-2023-402997.8Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by usingCVE-2023-40307.8A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover toCVE-2023-403009.8NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.CVE-2023-403019.8NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.CVE-2023-403029.1NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions VulnerabilityCVE-2023-403037.8GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rloginCVE-2023-403055.5GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.CVE-2023-403066.1SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insuff
CVE-2023-40293: Medium severity, CVSS 6.8 | Vulnix