CVE-2024-6245

Published: Oct 28, 2024Modified: Jun 17, 2026Deferred

7.4

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 5.9

Source: cve@asrg.io (Secondary)

Description

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50.

Related CWEs

CWE-1392

Use of Default Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (2)

https://www.global-infotainment-system.com/en/top.html

Source: cve@asrg.io

https://www.marutisuzuki.com/corporate/technology/smartplay-systems

Source: cve@asrg.io

Timeline

No history available yet.