harman records

9 published records for vendor harman.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2015-8362No exploit	The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, harman · amx firmware · CWE-255 Pre-auth Hard-coded credentials	Critical9.8	—	4.6%	Jan 22, 2016
40Plan	CVE-2016-1984No exploit	The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, whharman · amx firmware · CWE-255 Pre-auth Hard-coded credentials	Critical9.8	—	4.0%	Jan 22, 2016
37Monitor	CVE-2019-11224Proof of concept	HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection.harman · amx mvp5150 firmware · CWE-78 RCE Command injection	High8.8	—	6.5%	May 15, 2019
18Monitor	CVE-2019-19562No exploit	An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obharman · hermes · CWE-287 Auth bypass	Medium4.6	—	0.4%	Nov 15, 2020
18Monitor	CVE-2019-19560No exploit	An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obharman · hermes · CWE-287 Auth bypass	Medium4.6	—	0.4%	Nov 15, 2020
18Monitor	CVE-2019-19556No exploit	An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtaharman · hermes Auth bypass	Medium4.6	—	0.4%	Nov 15, 2020
9Monitor	CVE-2019-19563No exploit	A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to oharman · hermes	Low2.4	—	0.4%	Nov 15, 2020
9Monitor	CVE-2019-19557No exploit	A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtharman · hermes · CWE-922	Low2.4	—	0.4%	Nov 15, 2020
9Monitor	CVE-2019-19561No exploit	A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to oharman · hermes · CWE-922	Low2.4	—	0.4%	Nov 15, 2020

CVE-2015-8362
40Plan
The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account,
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Hard-coded credentials
harman · amx firmwareJan 22, 2016
CVE-2016-1984
40Plan
The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, wh
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Hard-coded credentials
harman · amx firmwareJan 22, 2016
CVE-2019-11224
37Monitor
HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection.
HighCVSS 8.8Proof of conceptEPSS 6%
- RCE
- Command injection
harman · amx mvp5150 firmwareMay 15, 2019
CVE-2019-19562
18Monitor
An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to ob
MediumCVSS 4.6No exploitEPSS 0%
- Auth bypass
harman · hermesNov 15, 2020
CVE-2019-19560
18Monitor
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to ob
MediumCVSS 4.6No exploitEPSS 0%
- Auth bypass
harman · hermesNov 15, 2020
CVE-2019-19556
18Monitor
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obta
MediumCVSS 4.6No exploitEPSS 0%
- Auth bypass
harman · hermesNov 15, 2020
CVE-2019-19563
9Monitor
A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to o
LowCVSS 2.4No exploitEPSS 0%
harman · hermesNov 15, 2020
CVE-2019-19557
9Monitor
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obt
LowCVSS 2.4No exploitEPSS 0%
harman · hermesNov 15, 2020
CVE-2019-19561
9Monitor
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to o
LowCVSS 2.4No exploitEPSS 0%
harman · hermesNov 15, 2020