CVE-2024-6348 | THREATINT

Assigner	ASRG
Reserved	2024-06-26
Published	2024-08-19
Updated	2024-08-19

Description

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

MEDIUM: 5.3

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/V:D/RE:H

Problem types

CWE-330: Use of Insufficiently Random Values

Product status

Default status

unaffected

Altima 2022

unknown

Credits

Thomas Sermpinis 0x4006138be0

References

https://asrg.io/security-advisories/

cve.org CVE-2024-6348

nvd.nist.gov CVE-2024-6348

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.