Lucene search

MitreCVE-2022-38766

HistoryJan 03, 2023 - 3:15 p.m.

CVE-2022-38766

2023-01-0315:15:10

CWE-294

mitre

web.nvd.nist.gov

cve-2022-38766

renault zoe

remote keyless system

replay attack

433.92 mhz

nvd

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack.

Affected configurations

Nvd

Node

renaultzoe_e-tech_firmwareMatch2021

AND

renaultzoe_e-techMatch-

VendorProductVersionCPE
renaultzoe_e-tech_firmware2021cpe:2.3:o:renault:zoe_e-tech_firmware:2021:*:*:*:*:*:*:*
renaultzoe_e-tech-cpe:2.3:h:renault:zoe_e-tech:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
renault	zoe_e-tech_firmware	2021	cpe:2.3:o:renault:zoe_e-tech_firmware:2021:::::::*
renault	zoe_e-tech	-	cpe:2.3:h:renault:zoe_e-tech:-:::::::*

References

github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

Related for CVE-2022-38766