Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.
samsung harman infotainment 20190525031613