CVE-2024-6348

Aug. 19, 2024, 6:36 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Nissan Altima Blind Spot Protection Sensor ECU

  • 2022

Source

cve@asrg.io

Tags

CVE-2024-6348 details

Published : Aug. 19, 2024, 4:15 p.m.
Last Modified : Aug. 19, 2024, 6:36 p.m.

Description

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima (2022) allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-330 Use of Insufficiently Random Values The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References

URL Source
https://asrg.io/security-advisories/ cve@asrg.io
This website uses the NVD API, but is not approved or certified by it.