CVE

CVE-2023-28896

Severity:
LOW
Type:
CWE-326 Inadequate Encryption Strength
Publication date:
01/12/2023
Last modified:
06/12/2023

Description

Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with physical access to the vehicle.<br /> <br /> Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.<br /> <br /> <br /> <br /> <br /> <br />

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:preh:mib3_firmware:*:*:*:*:*:*:*:* 0304 (including)
cpe:2.3:h:preh:mib3:-:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools

botón arriba