CVE-2024-6348 | THREATINT

Assigner	ASRG
Reserved	2024-06-26
Published	2024-08-19
Updated	2024-08-19

Description

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

MEDIUM: 5.3

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/V:D/RE:H

Product status

Default status

unaffected

Altima 2022

unknown

Credits

Thomas Sermpinis finder

References

https://asrg.io/security-advisories/

cve.org CVE-2024-6348

nvd.nist.gov CVE-2024-6348

Download JSON

https://cve.threatint.com/CVE/CVE-2024-6348

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.