CoreCVE
Back

MEDIUM

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root

Published Nov 16, 2020

Description

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-354

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 16, 2020
Updated Aug 4, 2024
Reserved Nov 16, 2020
Link CVE-2020-28656
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-28656
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-28656