CVE-2023-40292

MediumCVSS 4.3

Published: 14/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Harman Infotainment version 20190525031613 and later discloses the IP address via CarPlay CTRL packets.

The disclosure of the IP address may lead to user privacy violations and increased risk of attacks on vehicle systems.

It is recommended to update the software to the latest version to minimize the risk associated with IP address disclosure.

Original NVD description (English source)

Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.