Vulnerabilities (CVE)

Filtered by vendor Vw Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34733 1 Vw 1 Discover Media Infotainment System 2023-12-10 N/A 6.8 MEDIUM
A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature.
CVE-2020-28656 1 Vw 2 Polo, Polo Firmware 2023-12-10 7.2 HIGH 6.8 MEDIUM
The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root.