What’s Vulnerable › Vulnerabilities

CVE-2024-6245: Default Credentials in ssh service for SmartPlay in Maruti Suzuki

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-28 · updated 2026-06-17
• Weakness: CWE-1392

Description

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50.

Affected products

• Faurecia Clarion Electronics Co., Ltd. SmartPlay: 66T0.05.50

References

• https://www.global-infotainment-system.com/en/top.html
• https://www.marutisuzuki.com/corporate/technology/smartplay-systems

Get alerted when CVE-2024-6245 or the next vulnerability affects your stack