CVE-2025-55618

HIGH

7.3

Description

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.

Details CVE

Score CVSS v3.17.3

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/27/2025

Derniere modification4/6/2026

Sourcenvd

Observations honeypot0

Produits affectes

hyundai:navigation

Faiblesses (CWE)

CWE-79

References

http://hyundai.com(cve@mitre.org)

https://github.com/MatJosephs/CVEs/tree/main/CVE-2025-55618(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.