Back

CVE-2024-6347

Aug. 15, 2024, 5:34 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Nissan Altima Blind Spot Detection Sensor ECU firmware

  • 2022

Source

cve@asrg.io

Tags

CWE-285
cve@asrg.io
2024-08-15
CVE-2024-6347

CVE-2024-6347 details

Published : Aug. 15, 2024, 3:15 p.m.
Last Modified : Aug. 15, 2024, 5:34 p.m.

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-285 Improper Authorization The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References

URL Source
https://asrg.io/security-advisories/CVE-2024-6347 cve@asrg.io
This website uses the NVD API, but is not approved or certified by it.