CVE-2019-19560: Medium severity harman hermes vulnerability
Published Nov 15, 2020
·Updated
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information.
Affected Software
1 affected component
Harman Hermes=1.5
Event History
Nov 15, 2020
CVE Published
via MITRE·11:41 PM
Data Sourced
via MITRE·11:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19560?
CVE-2019-19560 is rated as a high severity vulnerability due to its ability to allow authentication bypass.
2
How do I fix CVE-2019-19560?
To fix CVE-2019-19560, it is recommended to apply any available firmware updates provided by the manufacturer.
3
What systems are affected by CVE-2019-19560?
CVE-2019-19560 affects the Harman Hermes software version 1.5.
4
Can CVE-2019-19560 be exploited remotely?
No, CVE-2019-19560 requires physical access to the device hardware for exploitation.
5
What does CVE-2019-19560 expose an attacker to?
CVE-2019-19560 exposes system information to an attacker with physical access, impacting confidentiality.