Hyundai Motor America Blue Link

Risk Summary

ATTENTION: Remotely exploitable

CVEs (2)

Remediations

• Hyundai Motor America released Blue Link, Version 3.9.6, a mandatory update to the application, which mitigates the aforementioned vulnerabilities on March 6, 2017, for Android devices and March 8, 2017, for iOS devices.
• Rapid7 has released a security advisory that can be found at https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixed

Affected Vendors

Affected Products (2)