CVE-2020-8539 - Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities

Back Back to CVE browser

HIGH

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities

Published Dec 1, 2020

7.8

HIGH

CVSS 3.1

EPSS 2.32%

Description

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities. In addition, this executable may be used by an attacker to inject commands to generate CAN frames that are sent into the M-CAN bus (Multimedia CAN bus) of the vehicle.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://gist.github.com/gianpyc/4dc8b0d0c29774a10a97785711e325c3
x_refsource_MISCThird Party Advisory
https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://gist.github.com/gianpyc/4dc8b0d0c29774a10a97785711e325c3		x_refsource_MISCThird Party Advisory
https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 1, 2020

Updated Aug 4, 2024

Reserved Feb 3, 2020

Link CVE-2020-8539

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8539

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8539