Lucene search
HistoryNov 22, 2024 - 4:15 p.m.
CVE-2024-51074
access control
odometer
kia seltos
software vulnerability
CVSS3
6.7
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
EPSS
0
Percentile
10.4%
Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to arbitrarily change odometer readings in the vehicle by targeting the instrument cluster through the unsecured CAN network.
Related
cve
cve
CVE-2024-51074
2024-11-22 16:15:33
cvelist
cvelist
CVE-2024-51074
2024-11-22 00:00:00
vulnrichment
vulnrichment
CVE-2024-51074
2024-11-22 00:00:00
CVSS3
6.7
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
EPSS
0
Percentile
10.4%
Related for NVD:CVE-2024-51074