Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-6347

Aug. 15, 2024, 5:34 p.m.

Tags

CWE-285
cve@asrg.io
2024-08-15
CVE-2024-6347

Product(s) Impacted

Nissan Altima Blind Spot Detection Sensor ECU firmware

  • 2022

Description

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication.

Weaknesses

CWE-285
Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

CWE ID: 285

Date

Published: Aug. 15, 2024, 3:15 p.m.

Last Modified: Aug. 15, 2024, 5:34 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@asrg.io

References

https://asrg.io/ cve@asrg.io