1023 matches found
Android Automotive OS Update Bulletin—February 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2024-02-05 or later from the February 2024 Android Security Bulletin in addition to all issues in th...
Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive
By Deeba Ahmed Vendors have 90 days to release security patches before Trend Micro publicly discloses it. This is a post from HackRead.com Read the original post: Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive...
CVE-2023-28901
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
CVE-2023-28900
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
Improper access control
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
Improper access control
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
CVE-2023-28901
CVE-2023-28901 involves a Broken Access Control vulnerability in the Skoda Automotive cloud (Skoda Connect). The exposed data includes recent trip data, vehicle mileage, fuel consumption, and speeds, obtainable by specifying an arbitrary VIN. The root cause is insufficient access restrictions on ...
CVE-2023-28901 Trip Data Disclosure from Backend
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
CVE-2023-28900
Summary (CVE-2023-28900) : The Skoda Automotive cloud backend (Skoda Connect service) is affected by a Broken Access Control vulnerability that allows disclosure of nicknames and other user identifiers by supplying an arbitrary vehicle VIN number. The root cause is improper access control on the ...
CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number...
Skoda Security Breach
Skoda is a line of automobiles from Skoda. A security vulnerability exists in Skoda Automotive. A remote attacker could exploit the vulnerability to obtain a user's recent trip data, vehicle mileage, gas mileage, average and top speed, and other information by specifying an arbitrary vehicle VIN...
PT-2024-12183 · Skoda · Skoda Automotive Cloud
Name of the Vulnerable Software and Affected Versions: Skoda Automotive cloud affected versions not specified Description: The issue allows attackers to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number, due to a Broken Access...
The vulnerability of the UMC software product management components, including Opcenter Quality, SIMATIC PCS neo, SINUMERIK Integrate RunMyHMI/Automotive, Totally Integrated Automation Portal (TIA Portal), allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the UMC software product management components, including Opcenter Quality, SIMATIC PCS neo, SINUMERIK Integrate RunMyHMI/Automotive, Totally Integrated Automation Portal TIA Portal, is related to the use of an unauthorized intermediate policy file. Exploiting this...
Android Automotive OS Update Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2024-01-05 or later from the January 2024 Android Security Bulletin in addition to all issues in thi...
CVE-2023-33037
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data...
Design/Logic Flaw
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data...
CVE-2023-33118 Use After Free in Automotive Audio
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL...
CVE-2023-33118 Use After Free in Automotive Audio
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL...