« Volver al listado

CVE-2023-39076

Estado: ModificadaMedia (4.6)—

Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of Service (DoS) in the in-car infotainment system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

GM — Mylink Infotainment System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-39076",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-39076",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-26T18:05:03.976683Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-09-08T13:15:07.827",
  "references": [
    {
      "url": "https://blog.dhjeong.kr/posts/vuln/202307/gm-chevrolet/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.jhyeon.dev/posts/vuln/202307/gm-chevrolet/",
      "tags": [
        "Broken Link"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39076",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.dhjeong.kr/posts/vuln/202307/gm-chevrolet/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.jhyeon.dev/posts/vuln/202307/gm-chevrolet/",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39076",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of Service (DoS) in the in-car infotainment system."
    },
    {
      "lang": "es",
      "value": "Inyectar datos aleatorios en el área de memoria USB en el Software de vehículos Chevrolet Equinox 2021 de General Motors (GM). 2021.03.26 (versión de compilación) provoca una Denegación de Servicio (DoS) en el sistema de infoentretenimiento del automóvil."
    }
  ],
  "lastModified": "2026-06-17T06:11:34.270",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gm:mylink_infotainment_system:2021.3.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D92838E-E17F-429C-8E61-2D5EC8ACBACB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:gm:chevrolet_equinox:2021:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D14DEB54-FA5B-4DF0-BB34-35EC6CE2CB56"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}