CVE-2017-6052

A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to access or influence communications between the identified endpoints.

• CWE-300

• http://www.securityfocus.com/bid/98033Third Party Advisory, VDB Entry
• https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixedThird Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/98033Third Party Advisory, VDB Entry
• https://community.rapid7.com/community/infosec/blog/2017/04/25/r7-2017-02-hyundai-blue-link-potential-info-disclosure-fixedThird Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-115-03Third Party Advisory, US Government Resource

Published

Apr 26, 2017

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6046An Insufficiently Protected Credentials issue was discovered…
• CVE-2017-6047Detcon Sitewatch Gateway, all versions without cellular, Pas…
• CVE-2017-6048A Command Injection issue was discovered in Satel Iberia Sen…
• CVE-2017-6049Detcon Sitewatch Gateway, all versions without cellular, an …
• CVE-2017-6050A SQL Injection issue was discovered in Ecava IntegraXor Ver…
• CVE-2017-6051An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-6053A Cross-Site Scripting issue was discovered in Trihedral VTS…
• CVE-2017-6054A Use of Hard-Coded Cryptographic Key issue was discovered i…7.5
• CVE-2017-6055XML external entity (XXE) vulnerability in eParakstitajs 3 b…
• CVE-2017-6056It was discovered that a programming error in the processing…
• CVE-2017-6058Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c…7.5
• CVE-2017-6059Mod_auth_openidc.c in the Ping Identity OpenID Connect authe…7.5